Techinical Tip: FortiSIEM Collector Deletion Error

[premchanderr]

Description

This article describes that when deleting collectors from FortiSIEM GUI, it displays an error to remove items from the collector.

Scope

FortiSIEM v6.0+.

Solution

When deleting a collector in FortiSIEM GUI it displays the message 'Please make sure the following items in this org/collector are not needed and try removing them first.':

Before deleting a collector, ensure no devices are pointing to this collector in CMDB:

1. Go under CMDB -> Devices -> Discovered by and select the collector to delete from the drop-down.
2. If devices are showing up under this collector, that is the root cause of this error.
3. Move those devices to a different collector or delete the device if not required.
4. Select the device, go under Edit -> Collector, and select a different collector from the drop-down to move.
5. Confirm there are no devices under the collector

Login in Chrome/Firefox's private browser and delete the collector. If the error persists, open a technical support ticket to further check the database.