Refer to the exhibit. Which two observations can you make after reviewing this log entry? (Choose two.)

The correct answer is C. This log is in a raw log format. D. This is the original log that FortiAnalyzer received from FortiGate. The log line is displayed as a single, unparsed key-value string exactly as it was received from FortiGate, indicating it is the raw log format and represents the original FortiGate log before any FortiAnalyzer normalization or formatting is applied.

Logging and Monitoring

Question

Exhibit

Options

AThis is a formatted view of the log.
BThis is a normalized log.
CThis log is in a raw log format.
DThis is the original log that FortiAnalyzer received from FortiGate.

How the community answered

(35 responses)

A
3% (1)
B
9% (3)
C
89% (31)

Explanation

The log line is displayed as a single, unparsed key-value string exactly as it was received from FortiGate, indicating it is the raw log format and represents the original FortiGate log before any FortiAnalyzer normalization or formatting is applied.

Topics

#raw logs#normalized logs#log format#FortiGate logs

Community Discussion

No community discussion yet for this question.

Full FCP_FAZ_AN-7.6 Practice