FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
alaxkar
Staff
Staff
Article Id 376150
Description This article describes how to resolve the FortiSIEM configuration type: 'FSIEM Unknown' error. 
Scope FortiSIEM.
Solution

To resolve the error FortiSIEM configuration type: 'FSIEM Unknown' at the time of Super or collector installation from ConfigFSM.sh script follow the below steps to resolve it:

 

configFSM-error.jpg

 

 Step 1: Check virttype using the below command. 

 

#cat /usr/local/bin/fortisiem-hw-info.sh | grep -i virttype

 

outputoutput

 

If this is showing virttype=$(virt-what) this needs to be replaced with virttype=$(echo kvm) if this is a KVM hypervisor. 

 

Step 2: Replace 'virt-what' with 'echo kvm' using the below command.

 

#sed -i.bak 's/virttype=$(virt-what)/virttype=$(echo kvm)/g' /usr/local/bin/fortisiem-hw-info.sh

 

#diff /usr/local/bin/fortisiem-hw-info.sh /usr/local/bin/fortisiem-hw-info.sh.bak

 

diff.png

 

Step 3: After implementing the modifications mentioned above, proceed with running the ConfigFSM.sh script. This should resolve the issue.