Technical Tip: How to replace a Collector node in FortiSIEM

[aldodelgadomtz]

Description	This article describes the simplest way to replace a Collector node.
Scope	FortiSIEM.
Solution	Follow the KDB in question to create a new Collector from scratch: Fresh Installation. If having Windows/Linux agents, back up the following file locally: ll /etc/httpd/accounts/passwds Once reinstalled, copy the previous file with the following commands: chown -R root.root /etc/httpd/accounts/passwds chmod -R 775 /etc/httpd/accounts/passwds Provision the new Collector as follows: phProvisionCollector --update <user> ‘<password>’ <Super IP or Host> Note: It is not necessary to delete any configuration from the Supervisor's GUI.