FortiSIEM Discussions
KarlH
Contributor II

Since phFortiInsightAI is disabled the Supervisor health is always in the red.

Technical Tip: How to deactivate UEBA/phFortiInsightAI service

 

The above article explains how to deactivate

phFortiInsightAI

 

I also don’t want its health to be looked at, how can I ensure the Supervisor health remains green, even though this proc is down

 

it mentions two files

 

/opt/phoenix/bin/phstatus.py

/opt/phoenix/config/phoenix_config.txt.orig  where the proc is referenced, do I edit that?

 

what do I have to do to get the SIEM to ignore that proc?

 

Also there is the  Important processes

 
Admin > All Settings > Monitoring > Important Processes
 
I just want to exclude on

phFortiInsightAI  

on  the supervisor
 
Karl
 
Karl Henning, Security Engineer, CISSP
Karl Henning, Security Engineer, CISSP
0 REPLIES 0