FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
Andy_G
Staff
Staff
Article Id 190805

Description

Summary of Topic

When creating event db backup, may be a possibility that the assumption is to have the web UI create a mount.  This is not true, when creating a backup location for the event DB, AO UI will assume that the location configured should be a local directory.

 

You may receive an error similar to this

Jan 18 14:56:26 james-sp phDataManager[27030]: [PH_UNABLE_ACCESS_DIR]:[eventSeverity]=PHL_ERROR,[procName]=phDataManager,[fileName]=DiskUChecker.cpp,[lineNumber]=1768,[dirName]=/172.16.20.152/nfs_test_mount/,[phLogDetail]=Unable to access directory

Steps for event DB backup

  1. Create a share on a remote device
  2. Mount the share on AO
  3. Log into web GUI of AO
  4. Click Admin >> Event DB management
    1. fill in the local destination under Archive Destination
  5. Click Apply

 

agodwin_FD39459_tn_FD39459-1.jpg

Additional Information

How to create an NFS share

http://www.computernetworkingnotes.com/network-administrations/nfs-server.html

 

Version Application

All

 

 

 

Contributors