How can administrators customize log retention on fetched logs?

Administrators can customize log retention on fetched logs by specifying the duration during the log fetching setup. This process allows them to define how long logs are retained before they are purged or archived, tailoring the retention policy to meet organizational needs or compliance requirements. By configuring this setting during log fetching, the administrator ensures that only logs needed for the desired retention period are kept, which can help in managing storage requirements and optimizing the performance of the FortiAnalyzer device.

Customizing log retention directly through the fetching setup is essential to maintain control over the data lifecycle, ensuring that pertinent logs are available for analysis while also preventing unnecessary accumulation of older logs that may no longer be relevant.