What log forwarding mode stores logs and uploads them to another FortiAnalyzer at scheduled times?

The log forwarding mode that stores logs and uploads them to another FortiAnalyzer at scheduled times is referred to as aggregation mode. In this mode, logs are collected and stored locally until a specified schedule is reached. At that point, the logs are then forwarded to the designated FortiAnalyzer. This approach is particularly beneficial for managing bandwidth usage, allowing for log batch uploads, which can reduce network congestion that might occur with more immediate log forwarding.

Understanding the other options can provide additional clarity on why aggregation mode stands out for this function. Forwarding mode generally implies a more real-time transfer of logs, which does not involve scheduled uploads. Logging mode is more about how logs are recorded rather than how they are managed between devices, while scheduling mode typically refers to the timing aspect and does not convey the specific mechanism of log storage and forwarding that aggregation mode embodies.