In FortiSIEM enterprise licensing mode, it the link between the collector and data center FortiSlEM cluster is down, what happens?
Enterprise Licensing Mode: In FortiSIEM enterprise licensing mode, collectors are deployed in remote sites to gather and forward data to the central FortiSIEM cluster located in the data center.
Collector Functionality: Collectors are responsible for receiving logs, events (e.g., syslog), and performance metrics from devices.
Link Down Scenario: When the link between the collector and the FortiSIEM cluster is down, the collector needs a mechanism to ensure no data is lost during the disconnection.
Event Buffering: The collector buffers the events locally until the connection is restored, ensuring that no incoming events are lost. This buffered data is then forwarded to the FortiSIEM cluster once the link is re-established.
References: FortiSIEM 6.3 User Guide, Data Collection and Buffering section, explains the behavior of collectors during network disruptions.
Lajuana
10 months agoRenea
10 months agoKiley
10 months agoAretha
10 months agoLeigha
11 months agoJillian
11 months agoAliza
10 months agoAliza
10 months agoAliza
10 months agoSherron
11 months agoJulian
11 months agoShawna
11 months agoTorie
9 months agoRaina
9 months agoRaymon
9 months agoOctavio
9 months agoArlene
9 months agoStefanie
10 months agoAimee
10 months agoJoye
10 months agoValentin
10 months agoPura
11 months agoAudry
11 months ago