How to limit my Collector of FortiSIEM?

Hello techbeck,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

Hello @techbeck ,

As per your query, in the Event Collector Definition you can set "Guaranteed EPS". Events from this Collector are always accepted when its event rate is below this Guaranteed EPS. FortiSIEM will re-allocate excess EPS (license minus the sum of Guaranteed EPS over all the collectors) based on need but the allocation will never go below the Guaranteed EPS. This means that value it's not a top limit of EPS but a minimum level of guaranteed eps. It's not possible to set a top limit of EPS on a collector.

Reference: https://help.fortinet.com/fsiem/5-3-3/Online-Help/HTML5_Help/Setting_Organizations_and_Collectors_SP.htm

Let me know if this helps.

Thanks