After purging from the SQL database, what happens to analytic logs?

When analytic logs are purged from the SQL database in FortiAnalyzer, they are not deleted permanently in the sense that they become unrecoverable. Instead, these logs are preserved in a compressed format within the archive. This allows for the retention of data while optimizing storage space, as the logs are not held in their original, more space-consuming format. The preservation of logs in a compressed archive enables organizations to retain critical data for compliance, analysis, and future reference without burdening the primary database. Thus, the choice indicating that the logs remain in the compressed archive aligns with FortiAnalyzer’s approach to managing log data efficiently while ensuring accessibility if needed.