After registering a device, what must be enabled on the FortiGate for FortiAnalyzer to collect logs?

For FortiAnalyzer to collect logs from a FortiGate device, logging needs to be enabled on the FortiGate. This feature ensures that events and activities—such as traffic, security incidents, and system events—are recorded and can be sent to the FortiAnalyzer for centralized management and analysis.

Enabling logging allows FortiGate to send log data in real-time or on a scheduled basis, which is crucial for security monitoring and compliance reporting. The logs collected by FortiAnalyzer can provide valuable insights into network activities and help in identifying security threats.

Other options, while potentially relevant to different functionalities within the network management ecosystem, do not directly facilitate log collection. Device tracking focuses on keeping tabs on assets and their statuses, alert notifications pertain to event alerts rather than log collection, and data sync relates more to synchronizing configuration or information rather than log transmission. Therefore, enabling logging is the fundamental requirement for ensuring that logs can be collected and analyzed by FortiAnalyzer.