Weird incident on FortiSIEM

Hello team,

We use FortiSIEM 5.3.3 and yesterday appeared a weird incident.

Our infrastructure are composed by one Supervisor that events are stored in a local storage, but appeared "DataManager: event store failed".

Someone could help me with this? And sorry for my English.

Contributor III

Hello,

You might need to check the Linux buffer overflow.

Moreover, check the memory utilization and disk utilization as well:

#df -h
#phstatus.py

Please let me know the outputs of these commands.

New Member

Hello Mohit,

Our machine have 32GB and avaibles there's 1GB, and disk utilization is around 85%.

Write below is the output from #phstatus.py:

Sign up