Logs are being deleted from one of your ADOMs earlier that the configured setting for archiving in your data policy. What is the most likely problem?
The total disk space is insufficient and you need to add other disk.
CPU resources are too high.
The ADOM disk quota is set too low based on log rates.
Logs in that ADOM are being forwarded in real-time to another FortiAnalyzer device.
https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG FAZ/1100_Storage/0017_Deleted%20device%20logs.htm
https://docs.fortinet.com/document/fo rtianalyzer/6.2.5/administration-guide/87802/automatic-deletion
Submit