Skip to main content
sramanujam
Staff
sramanujam
Staff
June 24, 2026

Technical Tip: How to Increase the Tenant Limit in the FortiSIEM Ingestion Playbook

  • June 24, 2026
  • 0 replies
  • 13 views

Description


This article describes how to increase the tenant limit in the FortiSIEM Ingestion Playbooks.


The default tenant limit value in the FortiSIEM Ingestion Playbook is 30. This scenario occurs when there are more than 30 tenants configured. The FortiSIEM alerts fetch and ingestion playbook complete successfully; however, records for some tenants may be missing.


Scope


FortiSOAR v7.5.x, FortiSOAR v7.6.x.


Solution


Step 1: Go to the configured FortiSIEM Ingestion -> Fetch Playbook.

Step 2: Select the Get Tenant IDs step.

Step 3: Update the IRI from /api/3/tenants (default) to /api/3/tenants?$limit=100. The limit should be defined based on the number of available tenants in FortiSOAR.


ffe3a6fa.png


Note: The default endpoint /api/3/tenants returns information for only 30 tenants. This issue occurs when the deployment has more than 30 tenants.

Terms & ConditionsAccessibility statement