Hello, I'm trying to add a new worker to a shard. The test is
successfull but if i try to deploy it i get following error: ClickHouse
provision error: ClickHouse DDL Failure: One of the entries is already
present in ClickHouse-Keeper registry. This c...
Hello, while testing in our system I noticed that PowerShell and Sysmon
events are not arriving in the SIEM system. Other events such as Windows
Event ID 4624 arrive without any problems. The template is defined for
the PowerShell events Microsoft-Wi...
Hello everyone, We are facing the following challenge: When I select a
dashboard and want it to remain permanently displayed, this is not the
case. The "Global FortiSIEM Dashboard" is displayed the next day at the
latest. Is there any solution for th...
Hello, I'm wondering how the user ip mapping works in FortiSIEM. I
observed an behavoiur where the logs do not contain any user, but
FortiSIEM manages to map the ip adress to the user somehow. Is it
possible to influence this behavior in any way? Is ...