How does FortiAnalyzer retrieve specific log data from the database?