DescriptionThis article explains how to delete a worker from the FortiSIEM instance.
Sufficient administrative privileges on the FortiSIEM will be required in order to perform this task.
Solution1) Log into FortiSIEM by going to: https://<address of the supervisor>
The display may appear differently depending upon whether SP mode or Enterprise Mode is being used. The following example is for an SP mode supervisor.
2) Go to Admin > License Management
3) Scroll down to the "VA Information" table and select the worker that is to be deleted.
4) Click on delete and confirm by clicking yes. The result will be for the worker to be removed from the list.
5) Click on Admin > General Settings
6) Remove the address from Worker Upload Settings, then Save.
The worker will now have been successfully removed from the FortiSIEM environment