FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
kdave
Staff
Staff
Article Id 378683
Description This article describes how to fix Collector IP to show IPv6 instead of IPv4 in Collector health.
Scope FortiSIEM.
Solution

When there is no IPv6 configured on the collector, Admin -> Health -> Collector Health shows the IPv6 address of the collector instead of the IPv4 address.

 

collector screenshot.png

 

The below-mentioned steps can be followed to correct this behavior such that the IPv4 address is shown correctly:

  • Take a snapshot of the collector at the Hypervisor level.
  • Use the below commands to disable the IPv6 in Collector:

 

sysctl -w net.ipv6.conf.all.disable_ipv6=1

sysctl -w net.ipv6.conf.default.disable_ipv6=1

 

Apply the changes:

 

# sudo sysctl -p

 

  • Once done, restart phMonitor in the collector:

 

# killall -9 phMonitor

 

  • Once phMonitor is up on the collector, refresh the Collector health page after a few minutes and check if the Collector IP shows with an IPv4 address.

 

Contributors