Which FortiAnalyzer feature allows you to obtain archive logs from another FortiAnalyzer device?

The feature that allows you to obtain archive logs from another FortiAnalyzer device is log fetching. This function enables the retrieval of archived log data from a remote FortiAnalyzer. This can be particularly beneficial in environments where log data needs to be centralized for combined analysis, troubleshooting, or compliance purposes.

Log fetching allows administrators to easily pull logs that have been archived due to storage limitations or retention policies on the primary FortiAnalyzer, ensuring that historical data is accessible for detailed analysis or reporting. By using this feature, organizations can maintain more comprehensive records and leverage FortiAnalyzer’s powerful analytics capabilities on logs stored on different devices.

In contrast, log forwarding in aggregation mode primarily relates to sending logs from multiple devices to a single FortiAnalyzer for aggregation, rather than retrieving them. Log analysis focuses on interpreting logs that are already present and does not facilitate the acquisition of logs from another device. Log compression is related to improving storage efficiency but does not involve the transfer of logs from one device to another. Thus, log fetching is the correct feature for obtaining archived logs from another FortiAnalyzer device.