FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
RuiChang
Staff
Staff
Article Id 396702
Description

 

This article provides a method to monitor the activity in PostgreSQL for detailed troubleshooting.

 

Scope

 

FortiSIEM.

 

Solution

 

PostgreSQL is the core element in FortiSIEM and determines the quality of performance. In some cases, users notice slowness, lagging, or hanging of the FortiSIEM device but are unable to find the root cause. It can be monitored from the PostgreSQL activity to understand the root cause.

 

The job of PostgreSQL is located in a separate schema and accessible via the command below:

 

#psql -U phoenix phoenixdb

#SELECT * FROM cron.job;

# SELECT * FROM cron.job_run_details;

# SELECT * FROM cron.job_run_details WHERE status!=’succeeded’;

 

RuiChang_0-1750126439049.png

 

From the tables, identify the abnormal or incomplete SQL queries to resolve the task executed by FortiSIEM. 

Contributors