FortiSIEM Discussions
Secucard
New Contributor III

FortiSIEM: Clickhouse cluster setup

Hi,
I hope, someone can help me with an issue here. Do not blame me ;-), I am new on this product, and I read the docs, however, it is confusing me.
Hi,

 

I want to achieve a redundant setup, using clickhouse for storage backend.
I setup the supervisor first. The supervisor will *not* be part of the keeper or data layer for the clickhouse installation, this will be done on 3 worker nodes (this was the plan/idea behind),
however, after I generated the license, and activate it, FortiSIEM is asking for a backend, when choosing clickhouse for backend, for the disk-path.


I did not provide a 5th disk node. Because, on the supervisor, there should be NONE of the clickhouse details.
I am confused. Do I need to have a clickhouse *keeper* on the *supervisor* indeed, then?

 

I reinstalled the Supervisor, with the 5th disk for understanding, but, the 5th disk is not be in use. Choosing Clickhouse on the install process, it again asks for a disk / partition, which is not in generated. The 5th disk is available, but not partitioned. 

 

I do not want my supervisor being part of the Clickhouse process, but it seems, that the supervisor has to be part of the Clickhouse-cluster-setup at least as a Keeper (?). How, then, should I partion the disk? LVM, and then ext4 or xfs? I could not find any documentation on it.

 

Maybe someone can help

Best

Ronny

10 REPLIES 10
yujames

I would usually follow this documentation, but I see how this use case will be a good reason to further improve options and describe the complete setup in this case.

https://help.fortinet.com/fsiem/7-2-2/Online-Help/HTML5_Help/config-storage-config-clickhouse-based-...

Announcements

Welcome to your new Fortinet Community!

You'll find your previous forum posts under "Forums"