FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
spoojary
Staff
Staff
Article Id 276496
Description This article describes the steps taken to address an issue where a license was not being correctly reflected in FortiSIEM.
Scope FortiSIEM.
Solution

Challenge: A user reported that a license was not reflecting as expected in FortiSIEM, despite it having worked correctly previously.

 

Actions Taken:

  1. A preliminary check was conducted to ascertain:

    • The issue was not related to FortiToken Cloud.
    • SDWAN was not in use.
    • The unit had functioned properly prior to this occurrence.

  2. The user was advised to re-upload the license on the FortiSIEM supervisor by following the steps outlined:

    • Relocate the current license file to a temporary directory: mv /etc/opsd/.fortisiem4x0 /tmp

    • The new license can be uploaded using the URL: https://<ip_of_supervisor>/phoenix/licenseUpload.html

    • Restart the phMonitor process: 'killall -9 phMonitor'.

  3. Post the above steps, the license should ideally reflect the updated dates.

After executing the suggested steps, the user confirmed that the issue was resolved and the license reflected the correct information.