FortiSIEM 'Online Data' Only Displays Logs Until May 9 No Recent Daily Log Volume Shown

[ismailurek2]

Hi Fortinet Community,

In FortiSIEM under Admin > Database > Online Data, I’m checking the daily log ingestion volume. However, the panel only shows data up to May 9. As of today (May 25), there is no daily log volume displayed for the last 16 days.

I’m experiencing the same behavior in my lab environment as well, where only logs up to 5 days ago are displayed.

Has anyone encountered a similar issue with the “Online Data” panel not showing recent log volumes?

Is this a known issue or limitation?

What can I do to force an update or refresh of this view?

Best Regards,

İsmail Ürek

[Secusaurus]

Hi @ismailurek2,

Dumb question, but: Did you click on the refresh button?

I assume, you do have recent logs (Analytics view)?

You are using ClickHouse, correct? Can you check on the nodes for recent database entries (SSH and look into the db directory)?

Best,

Christian