Viewing Archive Event Data
Note: Events for CustomerId 0 correspond to FortiSIEM internal system events. On the Archive Event Data page, these events are shown under Super/Local.
Complete these steps to view archived data:
- Go to ADMIN > Settings > Database > Archive Data.
- Search the Archived Data by Organization in the search box and drill-down to find the specific data by specific dates from the tree view.