FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days.
What is the most likely problem?
A . Quota enforcement is acting on analytical data before a report is complete
B . Logs are rolling before the report is run
C . CPU resources are too high
D . Disk utilization for archive logs is set for 15 days
Answer: A
Explanation:
When FortiAnalyzer reports are missing data from a certain period, despite the data retention policy being set for a longer duration (e.g., 60 days), it is often due to quota enforcement acting on the analytical data. This means that although the retention policy allows data to be stored for up to 60 days, the disk quota settings may be causing older data to be deleted or overwritten to make room for new data if the disk space allocated for analytics logs is exceeded. This can occur before the data reaches its retention period limit if the volume of incoming data is high or if the disk space is insufficiently allocated.
Latest NSE5_FAZ-7.2 Dumps Valid Version with 120 Q&As
Latest And Valid Q&A | Instant Download | Once Fail, Full Refund