When performing a log search on a FortiAnalyzer, it is generally recommended to use the Quick Search option. What is a valid reason for using the Full Search option, instead?

FortiAnalyzer's Quick Search is optimized for speed by querying only a subset of indexed log fields. When the required information is located in non-indexed fields or requires a deeper scan of the raw log content, the Full Search option is necessary.

Quick Search is not limited to data received within the last 24 hours; it can search across the entire log dataset, albeit only on indexed fields.

Both Quick Search and Full Search are designed to search across the FortiAnalyzer's stored logs, including logs received from FortiGates and potentially its own system logs, not exclusively differentiating local logs.

Content archive data (e.g., email or web content archives) is typically searched using specialized archive features, not through the general log Quick or Full Search functionality.