Technical Tip: How to Edit WinOSXmlParser to Parse...

koolishami · 09-26-2024

Description This article describes how to modify the 'WinOSXmlParser' to parse the 'Target User' field for Event ID 4729. By default, the parser processes the 'Target User' for Event ID 4728 (which occurs when a member is added to a security-enabled ...

koolishami · 09-26-2024

Description This article provides a step-by-step guide to resetting the Agent's Event Status from ‘Critical’ to ‘Normal,’ even when the Agent is sending events normally. Scope FortiSIEM v7.x+. Solution This issue typically arises after a FortiSIEM up...

koolishami · 08-19-2024

Description This article describes step-by-step instructions on how to unlock a user using the Command Line Interface (CLI) when the unlock function in the Graphical User Interface (GUI) is not working. Scope FortiSIEM v7.x+. Solution This issue occu...

koolishami · 08-19-2024

Description This article explains how to add or expand storage in Supervisor for ClickHouse when the "Edit Node" option is greyed out. Scope FortiSIEM v7.x+. Solution Example of a Screenshot of Greyed Out Options: This guide assumes that have already...

User Statistics

User Activity

Technical Tip: How to Edit WinOSXmlParser to Parse the ‘Target User’ for Event ID 4729

Troubleshooting Tip: Event Status Shows ‘Critical’ in Agent Health After Firmware Upgrade, Despite Normal Event Transmission

Troubleshooting Tip: Unlocking a User via CLI When GUI Unlock Fails

Technical Tip: How to Add/Expand ClickHouse Storage in Supervisor When 'Edit Node' is Greyed Out

Technical Tip: How to Edit WinOSXmlParser to Parse...

Troubleshooting Tip: Event Status Shows ‘Critical’...

Troubleshooting Tip: Unlocking a User via CLI When...

KCS