Description
This article describes a method to change the IP/FQDN on Windows Agent.
Scope
FortiSIEM.
Solution
FortiSIEM Windows Agent is registered to the FortiSIEM Supervisor via the IP address or FQDN of the Supervisor node. The IP address or FQDN is entered during the registration process and there are two methods to change the IP address or FQDN after the registration process:
- Re-register the FortiSIEM Windows Agent to the new FortiSIEM Supervisor IP/FQDN.
- Edit the database via DB Browser for SQLite. Refer to the guide below:
Step 1: Download the DB Browser for SQLite from the link below on the Windows Machine:
Step 2: Find this file in the Windows Machine:
C:\Program Data\AccelOps\Agent\Database\AoWinAgt.db
Step 3: Open the AoWinAgt.db file with DB Browser (Run as Administrator).
Step 4: 'Right-click' the table 'collector_details' and select Browse Table:
Step 5: Update the IP address from the box on the right and 'Apply' the changes.
Alternatively, SQL command can be used to update the content or value in the table as well:
UPDATE collector_details SET IP='10.47.48.186' WHERE ID='<IP in the Table>';
Step 6: Select the 'Write Changes' to save the content/value:
Related document:
