At what percentage of used disk quota will FAZ begin removing raw and archive logs?

The correct percentage at which Forti Analyzer (FAZ) begins to remove raw and archive logs is 95%. This action is implemented as a part of the disk quota management system, which is designed to prevent the appliance from reaching full capacity. When the used disk space reaches 95%, the system starts the cleanup process to ensure that there is sufficient space for incoming logs and that system performance is not hindered by running out of disk space.

Setting this threshold at 95% allows for a balance between retaining log data for analysis and ensuring that the system remains operational. This proactive approach to disk management helps maintain the efficiency and reliability of the logging system by ensuring that it does not become overwhelmed with data, which could potentially lead to operational issues.

Logs are critical for monitoring and analysis, but they also consume space. Hence, this threshold is strategically selected to allow the system to function effectively while managing disk usage intelligently.