Description This article describes how to configure custom listening
ports on a Collector to receive logs through the syslog protocol. Scope
FortiSIEM Solution Open a console or SSH connection to a Collector and
follow these steps: Edit the /opt/phoe...
Description This article describes some situations where FortiSiem
wrongly maps the Collector type value. Specifically, FortiSiem is
recognizing a 500F hardware collector as a VM Collector type.
Unregistering/re-registering the collector does not sol...
Hi I configured an Explicit Proxy on a Fortigate appliance. Fortigate
use FSSO for remote users authentication and it has tree main
interfaces: 1 LAN interface on which explicit proxy is configured and 2
WAN interface. My goal is that User A proxed t...
Hello @MonXbebe , generally User-IP mapping is used in Identity and
Location Dashboard and it's obtained through a live correlation of
several types of events (e.g. AD logon, DHCP) You can modify the file
/opt/phoenix/config/identityDef.xml file to a...
Can you please login to the Worker as root user and check if this file
exists? Can you run this command?ll
/opt/phoenix/log/phFortiInsightAI.pidll /opt/phoenix/log/ll /opt/ls -la
/usr/lib/jvm/
If you see in the log a message like that PH_AGENTMGR_JAVA_AGENT_ZOMBIE
maybe this can be useful to fix the issue: Here is example how to fix
it, but you will need to find correct file in /usr/lib/jvm directory. So
you can point it correctly ln -s
/u...
Hello @knjuguna . Is phFortiInsighAI active on Supervisor (run phstatus
command). Have you tried to have a look to logs
(/opt/phoenix/log/phoenix.log). Please try to run phtools --start
phFortiInsightAI command on Worker and check if you retrieved so...