Disableing Clickhouse clickhouse-server.service,

[KarlH]

What are the ramifications of disabling the clickhouse-server.service,

Or asked another way what criteria would I need in order to make an informed decision? 

Id like a little more knowledge about clickhouse and if its set up by default and how to know if it actually is being used.I I don't think the log rotation is set up on a lot of the clients collectors at any rate so periodic removal of logs has to take place until there is a final solution.

Thank you in advance.

[KarlH · Accepted solution]

Specifically the customer as lost the creds to the whole collector not the registration cred the logon creds to the collector. 

[KarlH · Accepted solution]

Most enlightening news indeed!! This has solved my dilemma. I should have been much more clear in my problem statement  it seems others have  seen fit to continue to install a old 6.5 collector image against a 7.1.3 supervisor\SIEM .  Why I do not know.  Where are the bug fixes ( release notes)  and performance improvements for 7.1.3  Please point me to the linke I will close this thread. Thank you all for you help. 

[premchanderr]

Hi @KarlH ,

Refer to below document to disable clickhouse service on collector:

https://community.fortinet.com/t5/FortiSIEM/Troubleshooting-Tip-High-root-disk-usage-on-collector-du...

[premchanderr · Accepted solution]

Hi @KarlH ,

To disable clickhouse on collector:

systemctl stop clickhouse-server.service
systemctl disable clickhouse-server.service

Detailed Documentation: https://community.fortinet.com/t5/FortiSIEM/Troubleshooting-Tip-High-root-disk-usage-on-collector-du...

Note: These steps are only for collector, do not run on super or worker.

[KarlH · Accepted solution]

Specifically the customer as lost the creds to the whole collector not the registration cred the logon creds to the collector.