Technical Tip: How to resolve error FortiSIEM configuration type: 'FSIEM Unknown'

To resolve the error FortiSIEM configuration type: 'FSIEM Unknown' at the time of Super or collector installation from ConfigFSM.sh script follow the below steps to resolve it:

 Step 1: Check virttype using the below command. 

#cat /usr/local/bin/fortisiem-hw-info.sh | grep -i virttype

output

If this is showing virttype=$(virt-what) this needs to be replaced with virttype=$(echo kvm) if this is a KVM hypervisor. 

Step 2: Replace 'virt-what' with 'echo kvm' using the below command.

#sed -i.bak 's/virttype=$(virt-what)/virttype=$(echo kvm)/g' /usr/local/bin/fortisiem-hw-info.sh

#diff /usr/local/bin/fortisiem-hw-info.sh /usr/local/bin/fortisiem-hw-info.sh.bak

Step 3: After implementing the modifications mentioned above, proceed with running the ConfigFSM.sh script. This should resolve the issue.