Skip to main content
kdave
Staff
Staff
February 25, 2025

Technical Tip: How to fix Collector IP shows IPv6 instead of IPv4 in Collector health

  • February 25, 2025
  • 0 replies
  • 482 views
Description This article describes how to fix Collector IP to show IPv6 instead of IPv4 in Collector health.
Scope FortiSIEM.
Solution

When there is no IPv6 configured on the collector, Admin -> Health -> Collector Health shows the IPv6 address of the collector instead of the IPv4 address.

 

collector screenshot.png

 

The below-mentioned steps can be followed to correct this behavior such that the IPv4 address is shown correctly:

  • Take a snapshot of the collector at the Hypervisor level.
  • Use the below commands to disable the IPv6 in Collector:

 

sysctl -w net.ipv6.conf.all.disable_ipv6=1

sysctl -w net.ipv6.conf.default.disable_ipv6=1

 

Apply the changes:

 

# sudo sysctl -p

 

  • Once done, restart phMonitor in the collector:

 

# killall -9 phMonitor

 

  • Once phMonitor is up on the collector, refresh the Collector health page after a few minutes and check if the Collector IP shows with an IPv4 address.