1. Asset Connectivity Dashboard:
I want to build a dashboard in FortiSIEM to monitor connectivity status of all assets firewalls (syslog), Windows agents, and Linux servers (syslog). Need help with the right analytical filters or logic to show if these devices are actively sending logs or not. Please suggest any specific steps or best practices to set this up.
2. Query Max Limit Reached:
I keep getting the “Query Max Limit Reached” error many dashboard and default queries stay in running or waiting state, blocking new analytics queries. Can someone explain why this happens and how to manage or stop these background queries? Need steps or recommendations to prevent it from recurring
verison 7.2.5
#Fortisiem
Reg,
@kt
