This article describes how to configure Supervisor Event Database Online Storage using local disk
Table of Contents
Scope
FortiSIEM v7.
Solution
Step 1: During the initial configuration process, after login and registering, the FortiSIEM Supervisor with a valid license is requested to configure Event Database storage.
Step 2: At Event Database storage page, select Local Disk. The user will be prompted to enter the disk name.
For hardware appliances: enter ‘hardware’.
Note: The supervisor will run a script to configure local storage.
For Virtual Machine: enter the disk name that is attached to the Virtual Machine.
Note: Refer ‘Get disk name’ section to identify the correct disk name for Event Database storage.
Step 3: Once entered the disk name, select Test
Note: The sample screenshot below is for Virtual Machine configuration.
Step 4: If the test is successful, the user will be prompted to set the admin password (during initial configuration steps) -> Save
Note: The sample screenshot below is for Virtual Machine configuration.
Get disk name (For virtual machine only)
Step 1: From Supervisor CLI, run below command to check which disk is not in use (not configured):
[root@Supervisor ~]# fdisk -l
Step 2: From the CLI output, look for the disk that does not have any device configured
Note: From below sample output, /dev/sde will be used as it does not have any device configured.
Step 3: Based on the above CLI output, enter /dev/sde at the Event Storage database page.