In order for a device to start collecting logs on FortiAnalyzer, what must it be?

For a device to start collecting logs on FortiAnalyzer, it must be registered. Registration is a fundamental step in establishing a connection between the device (such as a FortiGate firewall, for instance) and the FortiAnalyzer. This process ensures that the FortiAnalyzer recognizes the device that is sending logs and can properly account for the incoming log data.

Registration involves configuring the device with the necessary parameters, such as the IP address of the FortiAnalyzer and other credentials, allowing secure communication between the two entities. Once registered, the FortiAnalyzer will accept logs from that device and can start effective log management and analysis.

This registration process creates a structured environment where devices are identified, allowing FortiAnalyzer to differentiate log sources, and efficiently manage and analyze the data being collected. In context, while a device may be connected to the internet or configured with a static IP address, these are not prerequisites for log collection in FortiAnalyzer without prior registration. Furthermore, a device being in active status alone does not guarantee log collection; it needs to be registered with the FortiAnalyzer as part of the operational framework.