When are logs moved to archive in Fortianalyzer?

Logs are moved to an archive in FortiAnalyzer when the log file reaches a specific size. This mechanism helps manage disk space efficiently and ensures that the logging system can continue to function without interruptions. When the size of the log file exceeds the defined threshold, older logs are archived, allowing new log data to be written effectively.

This process helps in optimizing storage management, ensuring that critical logging data is retained while also making space for ongoing log data generation. This functionality is crucial for maintaining system performance and facilitating compliance with data retention policies.

In contrast, the other options don't accurately reflect how FortiAnalyzer manages log archiving. For instance, archiving based on time intervals, user requests, or system reboots does not inherently drive the need to archive logs. Instead, these methods do not align with how log retention and archiving strategies are typically employed in FortiAnalyzer settings.