FortiSIEM Reference Architecture

FSM_FTNT · 08-15-2024

This release of FortiSIEM brings two new features and several new enhancements. New Features: Raw Event Size-Based Licensing: This new licensing scheme focuses on the total raw event size per day, licensed as GB per day of storage. This new licensing...

FSM_FTNT · 11-09-2023

FortiSIEM 7.1.0 – General Availability FortiSIEM has been updated to version 7.1.0, and with it comes a series of improvements aimed at simplifying security operations and IT management. Let’s dive into the key features that have been introduced or e...

FSM_FTNT · 04-28-2023

We have recently released content update 406 (6.7.0, 6.7.1 and 6.7.2). Content updates are available for the earlier release of FortiSIEM supporting Content Updates. https://help.fortinet.com/fsiem/6-7-0/Online-Help/HTML5_Help/content_updates.htm#Con...

FSM_FTNT · 03-15-2023

We have recently released content update 404 (6.7.0, 6.7.1 and 6.7.2). Content updates are available for the earlier release of FortiSIEM supporting Content Update. https://help.fortinet.com/fsiem/6-7-0/Online-Help/HTML5_Help/content_updates.htm#Cont...

FSM_FTNT · 03-15-2023

This release provides a number of important fixes. https://docs.fortinet.com/document/fortisiem/6.7.2/release-notes/561284/whats-new-in-6-7-2

FSM_FTNT · 10-23-2024

If you want to install an earlier 7.1.x version of FSM Collector you should be able to deploy from here Use the app offer instead of vm offer https://azuremarketplace.microsoft.com/en-us/marketplace/apps/fortinet.fortinet-fortisiem?tab=Overview

FSM_FTNT · 10-23-2024

What do the logs look like, do you have some samples raw events?

FSM_FTNT · 10-23-2024

Hi, You shouldnt be mounting the warm tier manually, if that is what you are doing?You should make sure that the storage is on the VM but then define via the GUI under Admin / Setup / Storage

FSM_FTNT · 10-16-2024

https://docs.fortinet.com/document/fortisiem/7.1.5/release-notes/46171/whats-new-in-7-1-5See bug ID 1009809 for the ClickHouse installed on the Collector

FSM_FTNT · 10-16-2024

Hi Karl1) Collectors do not store data, other than caching if connectivity to the Super or Worker is lost. You cannot install an event database (eventDB or ClickHouse) on the collector.There was an issue on some versions of FortiSIEM that was fixed i...

User Statistics

User Activity

FortiSIEM 7.2.2 Release

FortiSIEM 7.1.0

FortiSIEM Content Update 406

FortiSIEM Content Update 404

FortiSIEM 6.7.2 Release

Re: Seeking advice for re-install of VM (All in One type) Collector only Azure cloud,

Re: OP Manager Parser

Re: Add Warm Tier Issue

Re: Disableing Clickhouse clickhouse-server.service,

Re: Disableing Clickhouse clickhouse-server.service,

FortiSIEM Reference Architecture

Re: FortiSIEM Database purpose

FortiSIEM Incidnet Dashboard

Re: FortiSIEM Parser for Wallix Admin Bastion

Re: SIEM: Worker Add Disk

Re: Seeking advice for re-install of VM (All in On...

Re: Do fortisiem license also include NXLog agent ...

Re: Windows Agent connectivity through Collector o...

Re: Does FortiSEM support VisionOne and is an upda...

Re: FortiSIEM - Traffic from x.x.x.x to Malware IP...

FortiSIEM

Fortinet Training Institute

KCS