How to configure Supervisor Event Database Online Storage on local disk

This article describes how to configure Supervisor Event Database Online Storage using local disk

Scope

FortiSIEM v7.

Solution

Step 1: During the initial configuration process, after login and registering, the FortiSIEM Supervisor with a valid license is requested to configure Event Database storage.

Step 2: At Event Database storage page, select Local Disk. The user will be prompted to enter the disk name.

For hardware appliances: enter ‘hardware’.

Note: The supervisor will run a script to configure local storage.

For Virtual Machine: enter the disk name that is attached to the Virtual Machine.

Note: Refer ‘Get disk name’ section to identify the correct disk name for Event Database storage.

Step 3: Once entered the disk name, select Test

Note: The sample screenshot below is for Virtual Machine configuration.

Step 4: If the test is successful, the user will be prompted to set the admin password (during initial configuration steps) -> Save

Note: The sample screenshot below is for Virtual Machine configuration.

Get disk name (For virtual machine only)

Step 1: From Supervisor CLI, run below command to check which disk is not in use (not configured):
[root@Supervisor ~]# fdisk -l

Step 2: From the CLI output, look for the disk that does not have any device configured
Note: From below sample output, /dev/sde will be used as it does not have any device configured.

Step 3: Based on the above CLI output, enter /dev/sde at the Event Storage database page.