Skip to main content
ismailurek2
New Member
May 25, 2025
Question

FortiSIEM 'Online Data' Only Displays Logs Until May 9 No Recent Daily Log Volume Shown

  • May 25, 2025
  • 1 reply
  • 391 views

Hi Fortinet Community,

 

In FortiSIEM under Admin > Database > Online Data, I’m checking the daily log ingestion volume. However, the panel only shows data up to May 9. As of today (May 25), there is no daily log volume displayed for the last 16 days.

 

I’m experiencing the same behavior in my lab environment as well, where only logs up to 5 days ago are displayed.

 

 

Has anyone encountered a similar issue with the “Online Data” panel not showing recent log volumes?

Is this a known issue or limitation?

What can I do to force an update or refresh of this view?


fsm_online_data.png

 

Best Regards,

İsmail Ürek

 

1 reply

Secusaurus
Contributor III
May 28, 2025

Hi @ismailurek2,

 

Dumb question, but: Did you click on the refresh button?

 

I assume, you do have recent logs (Analytics view)?

You are using ClickHouse, correct? Can you check on the nodes for recent database entries (SSH and look into the db directory)?

 

Best,

Christian

NSE8 | Fortinet Advanced MSSP Partner
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT