Which three statements about collector communication with the FortiSIEM cluster are true? (Choose three.)

Question

Options

• ACollectors communicate periodically with the supervisor node.
• BThe supervisor periodically checks the health of the collector.
• CThe only communication between the collector and the supervisor is during the registration
• DThe supervisor does not initiate any connections to the collector node.
• ECollector upload event data to any node in the worker upload list, but report their health directly to

• A
  86% (30)
• C
  6% (2)
• D
  9% (3)

Explanation

FortiSIEM collectors are responsible for gathering logs from devices and forwarding them to the FortiSIEM cluster. Their communication with the cluster follows these key principles: Collectors periodically communicate with the supervisor node. This allows them to report status, receive updates, and verify configurations. The supervisor periodically checks the health of the collector. The supervisor monitors the collector's uptime, connectivity, and performance. Collectors upload event data to worker nodes but report health to the supervisor. Event logs are uploaded to worker nodes as per the worker upload list, ensuring distributed event processing. Health status is always reported directly to the supervisor for centralized monitoring.

No community discussion yet for this question.