Viewing Archive Event Data

The event database archived data is displayed in tree view grouped by Organization and archive dates.

Note: Events for CustomerId 0 correspond to FortiSIEM internal system events. On the Archive Event Data page, these events are shown under Super/Local.

Complete these steps to view archived data:

1. Go to ADMIN > Settings > Database > Archive Data.
2. Search the Archived Data by Organization in the search box and drill-down to find the specific data by specific dates from the tree view.