Weird incident on FortiSIEM

[vinicius_azevedosw]

Hello team,

We use FortiSIEM 5.3.3 and yesterday appeared a weird incident.

Our infrastructure are composed by one Supervisor that events are stored in a local storage, but appeared "DataManager:  event store failed". 

Someone could help me with this? And sorry for my English.

[Anonymous]

Hello,

You might need to check the Linux buffer overflow.

Moreover, check the memory utilization and disk utilization as well:

#df -h
#phstatus.py

Please let me know the outputs of these commands.

[vinicius_azevedosw]

Hello Mohit, 

Our machine have 32GB and avaibles there's 1GB, and disk utilization is around 85%.

Write below is the output from #phstatus.py: