What you are searching for is "historical view" which is only available
on Fortigates with local (disk) storage. On appropriate Fortigates
historical FortiView can be enabled in the log settings.
Sorry I can not be of any help here, but I'm really curious on any
insights to come.Because this has been bugging me for quite some time
now, too.And I couldn't figure out if it is some misunderstanding on my
side (because of the realtime-nature of t...