Technical Tip: FortiSIEM archive NFS configuration troubleshooting

1. To configure NFS archiving on FortiSIEM, follow Installing NFS Server for FortiSIEM Event Storage.
2. Ensure the permissions in the Archive shared folder are applied correctly.
3. Run the command showmount in the Supervisor to confirm the shared folder(s) path.
   

    

Prerequisites:

• NFS server is reachable from FortiSIEM Supervisor.

• Required ports are open (NFS / RPC).

• Archive directory exists on the NFS server.

• Supervisor has read/write permissions on the NFS export.

showmount -e <NFS_IP>

4. Configure the Archive in the GUI, go to Admin -> Setup -> Storage -> Archive -> Add IP and shared folder -> Test.
   

    

Validation:

• Archive test succeeds without errors.

• NFS mount is visible on the Supervisor.

• No new archive-related errors in Supervisor logs.

• If the test failed with the error 'Archive test error: Unknown error 1', follow the steps below to fix this issue: 
  • SSH to the Supervisor and cat to the file /etc/fstab. If there is any Archive line configured in this file, remove it.
  • Remove the file /opt/phoenix/config/.nfsarchive.json from the Supervisor.
  • Configure the archive under GUI -> ADMIN -> Setup -> Storage -> Archive -> NFS -> Test.