FortiSIEM Discussions
Himanshu735
New Contributor II

FortiSIEM HA

Screenshot 2024-12-05 211831.png

I want to make HA on supervisor but i have some questions which not find in Fortinet document

1. in HA Both supervisor in HA but how to take worker in HA see red line in graph 

2. if location 1 worker fail how location collector send data on 2nd location worker ?

3. if one collector fail so how 2nd collector take all logs ?

4. can we registerd collectors with both supervisor ?

5. can we add both location workers on supervisor and follower ?

6. In HA if we doing configuration on primary follower sync automatically ?

2 REPLIES 2
kaashif_m
New Contributor II

Hi Himanshu, 

 

1. in HA Both supervisor in HA but how to take worker in HA see red line in graph

Workers are here to share the load and if you set the worker as data node it will take care of replication of the databases make sure all the collector from dc and dr are able to communicate with the worker node via 443 this is what the redline signifies  

2. if location 1 worker fail how location collector send data on 2nd location worker ?

you will be adding the worker ip in event Event Upload Workers. as in the screenshot attached check it for undersating

 

3. if one collector fail so how 2nd collector take all logs ?

above the version 7.2 we have collector HA inbuilt you have to configure it in cluster config also i have attached the screenshot check it

4. can we registerd collectors with both supervisor ?

you need to register the collector on only on the leader. its gets replicated into follower node 

5. can we add both location workers on supervisor and follower ?

you should only register to the leader from  both location and it will be replicated to the follower

6. In HA if we doing configuration on primary follower sync automatically ?

Screenshot 2024-12-07 112447.pngScreenshot 2024-12-07 112036.png

 

for any further clarification feel free to contact me 

k.kareem@groupmfi.com

KM
KM
Himanshu735
New Contributor II

THANKS BROTHER

Announcements

Welcome to your new Fortinet Community!

You'll find your previous forum posts under "Forums"