What happens to analytic logs in the original ADOM once a device is moved?

When a device is moved from one ADOM to another in FortiAnalyzer, the analytic logs associated with that device in the original ADOM remain intact until the SQL database is rebuilt. This ensures that historical data and logs related to the device's activity are preserved for reporting and analysis purposes. The database rebuilding process typically occurs during maintenance or when changes in the environment necessitate it.

This mechanism allows for continuity in data retention and analysis, which is crucial for compliance, forensic analysis, and understanding past events that relate to the device before the move. Therefore, analytic logs from the original ADOM will not be lost immediately nor automatically replicated in the new ADOM, providing administrators the ability to access the logs until they take specific action to rebuild the database.