FortiSIEM: Real-Time Dashboard for MSSQL via JDBC

[beingarif]

Hi everyone,

We're currently using FortiSIEM v7.3.2 and have successfully configured an MSSQL database connection using JDBC.

Our customer is requesting a real-time (live) dashboard experience. However, we've noticed that the dashboard appears to have a minimum refresh interval of 5 minutes.

Questions:

1. Is it possible to configure a live or near real-time dashboard in FortiSIEM for JDBC Performance Monitoring?
2. What is the minimum refresh interval supported for dashboard widgets?
3. Are there any workarounds or best practices for achieving faster data refresh from an external MSSQL source?

Any insights or guidance would be greatly appreciated!

Thanks in advance.

[beingarif]

@Anthony_E @Secusaurus can you please help here..

[Secusaurus]

Hi @beingarif,

I did not have a look at 7.4.0 which was released this week. But I know that the dashboards were changed in many ways here, perhaps you might find a solution for that here.

On 7.3 and below, you are correct, minimum refresh interval is 5 minutes. Dashboards are not meant to show live data, it's more like a "status" view - in our case on 4 large monitors in the SOC, so that you have a feeling about what's going on, looking occasionally at it or when I enter the room and want to know what they are doing ;)

For live information, you'd rather look at live view in Analytics or use another tool. I am pretty sure, FortiSOAR might bring more functionality in that way.

Best,

Christian