FortiAnalyzer manages and stores various types of logs, including local logs, across different ADOMs (Administrative Domains). Each type of log serves specific purposes, with some logs being ADOM-specific and others providing system-wide information.
* Option A - Local Logs Not Supported in FortiView:
* Local logs are indeed supported in FortiView. FortiView provides visibility and analytics for different log types across the system, including local logs, allowing users to view and analyze data efficiently.
* Conclusion:Incorrect.
* Option B - Playbook Logs for All ADOMs in the Root ADOM:
* FortiAnalyzer allows centralized viewing of playbook logs across all ADOMs from the root ADOM. This feature provides an overarching view of playbook executions, facilitating easier monitoring and management for administrators.
* Conclusion:Correct.
* Option C - Event Logs vs. Application Logs:
* Event Logsprovide information about system-wide events, such as login attempts, configuration changes, and other critical activities that impact the overall system. These logs apply across the FortiAnalyzer instance.
* Application Logsare more specific to individual ADOMs, capturing details that pertain to ADOM-specific applications and configurations.
* Conclusion:Correct.
* Option D - Event Logs Only in Root ADOM:
* Event logs are available across different ADOMs, not exclusively in the root ADOM. They capture system-wide events, but they can be accessed within specific ADOM contexts as needed.
* Conclusion:Incorrect.
Conclusion:
* Correct Answer:B. You can view playbook logs for all ADOMs in the root ADOMandC. Event logs show system-wide information, whereas application logs are ADOM specific.
* These answers correctly describe the characteristics and visibility of local logs within FortiAnalyzer.
References:
* FortiAnalyzer 7.4.1 documentation on log types, ADOM configuration, and FortiView functionality.