Clarification on HA and DR Requirements for FortiSIEM

[acronymm]

Hi FortiSIEM Community,

I have a question regarding the requirements for High Availability (HA) and Disaster Recovery (DR) setups in FortiSIEM

1. Multiple Instances Requirement: Is it correct that both HA and DR require more than one FortiSIEM instance? Specifically, can HA or DR be configured with just a single FortiSIEM instance, or do they both necessitate multiple instances?

Thank you for your assistance!

[Secusaurus · Accepted solution]

Hi @acronymm,

If your concern is about licensing: HA requires only a single license, DR requires a special license type, since it deploys kind of two Independent clusters (HA is only one cluster that works with majority-decissions, just like all ClickHouse-related setups).

In terms of machines, yes, you obviously need multiple instances. Failing over to something requires it to exist ;)

Note, that for HA, you need three supervisors (not two).

Best,

Christian