Fortinet FCP_FAZ_AN-7.6 Exam - Topic 1 Question 7 Discussion

Comprehensive and Detailed Explanation From Exact Extract of knowledge of FortiAnalyzer 7.6 Study guide documents:

FortiAnalyzer 7.6 stores on-premises logs in a ClickHouse SQL database (not MySQL, Postgres, or Elasticsearch). Fortinet's FortiAnalyzer 7.6 SQL Query documentation explicitly states that log data is inserted into the SQL database and that ''FortiAnalyzer uses a ClickHouse SQL database.''

This is consistent with how the study guide describes the storage/analytics pipeline in 7.6: it explains that FortiAnalyzer indexes incoming raw logs (insert rate) ''by the SQL database and the sqlplugind daemon.'' This ''SQL database'' in 7.6 corresponds to the ClickHouse-backed log database described in the Fortinet documentation.