Briefing Fortinet Knowledge

What is a valid reason for using the Full Search option, instead?

When performing a log search on a FortiAnalyzer, it is generally recommended to use the

Quick Search option. What is a valid reason for using the Full Search option, instead?

A.
The search items you are looking for are not contained in indexed log fields.

B.
You want the search to include content archive data as well.

C.
A quick search only searches data received within the last 24 hours.

D.
You want the search to include the FortiAnalyzer’s local logs.