FortiSIEM AIO - Collector questions and WMI/OMI issues
Hi everyone,
I'm setting up a FortiSIEM Supervisor All-in-one (AIO) with version 7.2.0, but I've encountered an issue with the Collector.
When I go to Admin → Setup → Collector, there is no option to configure the Collector’s IP or designate the server as a Collector. It seems like the Collector role is not enabled by default in my AIO environment. I also checked using systemctl, and the phCollector service does not exist on the system.
Steps I’ve already taken:
- I checked the /opt/phoenix/config/phoenix_config.txt file to verify if the Collector role is enabled, but it seems unrecognized.
- Tried to find and start the Collector service, but the system says it doesn't exist.
- Restarted the main FortiSIEM services (phoenix), but the issue persists.
I need to monitor events from Windows servers, but I'm encountering issues with WMI/OMI. I'm receiving errors such as "WMI failed (Login to remote object error)" and "OMI failed (Win32_OperatingSystem Result not found via OMI)", even though everything is enabled on the Windows machines.
Without the Collector, I cannot add the template for the Windows agent I've created.
Has anyone experienced something similar or knows how to properly configure the All-in-one server as a Collector? Do I need to install an additional package or run a specific command?
Thanks in advance for your help!