FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
yujames
Staff
Staff
Article Id 198543
Description
This article explains how to delete a worker from the FortiSIEM instance.

Sufficient administrative privileges on the FortiSIEM will be required in order to perform this task.

Solution
1)  Log into FortiSIEM by going to: https://<address of the supervisor>

The display may appear differently depending upon whether SP mode or Enterprise Mode is being used.  The following example is for an SP mode supervisor.

yujames_FD40921_tn_FD40921-1.jpg

2)  Go to Admin > License Management

yujames_FD40921_tn_FD40921-2.jpg

3)  Scroll down to the "VA Information" table and select the worker that is to be deleted.

yujames_FD40921_tn_FD40921-3.jpg

4)  Click on delete and confirm by clicking yes.  The result will be for the worker to be removed from the list.

5)  Click on Admin > General Settings

yujames_FD40921_tn_FD40921-4.jpg

6)  Remove the address from Worker Upload Settings, then Save.

yujames_FD40921_tn_FD40921-5.jpg

The worker will now have been successfully removed from the FortiSIEM environment

Contributors