What are offline logs on FortiAnalyzer?

The correct answer is A. Compressed logs, which are also known as archive logs, are considered to be offline logs. Logs are received and saved in a log file on the FortiAnalyzer disks. Eventually, when the log file reaches a configured size, or at a set schedule, it is rolled over by being renamed. These files (rolled or otherwise) are known as archive logs and are considered offline so…

Log and Data Policy

Question

Options

ACompressed logs, which are also known as archive logs, are considered to be offline logs.
BWhen you restart FortiAnalyzer. all stored logs are considered to be offline logs.
CLogs that are indexed and stored in the SQL database.
DLogs that are collected from offline devices after they boot up.

How the community answered

(61 responses)

A
79% (48)
B
13% (8)
C
2% (1)
D
7% (4)

Explanation

Logs are received and saved in a log file on the FortiAnalyzer disks. Eventually, when the log file reaches a configured size, or at a set schedule, it is rolled over by being renamed. These files (rolled or otherwise) are known as archive logs and are considered offline so they don't offer immediate analytic support. Combined, they count toward the archive quota and retention limits, and they are deleted based on the ADOM data policy.

Topics

#offline logs#archive logs#compressed logs#log storage types

Community Discussion

No community discussion yet for this question.

Full NSE5_FAZ-7.2 Practice