FortiSIEM 5.3.3 - Released

[DanielHanman]

Hi All,

We have released FortiSIEM 5.3.3!

You can find the release notes here https://docs.fortinet.com/document/fortisiem/5.3.3/release-notes/760862/whats-new-in-5-3-3#What's_Ne...

3 x Main Feature Enhancements:

• Linux Agent for SUSE Linux and Ubuntu 20
• Elastic Cloud as Event Database
• AlienVault OTX Integration for External Threat Integration

1 x New Feature:

• Use Pre-Computed Results in Search

The new Pre-Compute ​new feature can be of significant use if you need to run reports on end of day/week/month or longer, for example performance utilisation, who are the top talkers, top websites etc. There are some requirements to use this feature, namely it works on aggregated data so you need to use a count, average, sum, etc. aggregation and using the FortiSIEM event database.

When comparing reporting times between the event database vs. the pre-computed cache, we have seen a massive increase in performance. What would take tens of minutes or longer, reduced to seconds to complete the report using pre-compute.

Let us know what you think!

Thanks


------------------------------
Daniel
FortiSIEM Product Manager
------------------------------