Skip to main content
Saleh_Mostafa
Saleh_Mostafa
New Member
October 17, 2024
Question

FortiSIEM

  • October 17, 2024
  • 1 reply
  • 690 views

I Was implemented FortiSIEM super with collector but now it seems to me in the health collector warning then become critical found all the services down then restart all the services works fine but the phAgentManager restart then down and restart then down. I want to solve this and why or what cause this down  

    1 reply

    premchanderr
    Staff & Editor
    premchanderr
    Staff & Editor
    October 21, 2024

    Hi @Saleh_Mostafa ,

     

    phAgentManager would be high if any device integration in Admin > Setup > Pull Events has surplus of Events or events with large length.  You can test by disabling pull events for few recently added devices and then gradually enable to find root cause.

     

    Also check for error in collector:

    # cat /opt/phoenix/log/phoenix.log | grep -i phAgent

    Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!