FCSS_ADA_AR-6.7 · Question #55
Where are the SQLite databases that are used for the baselining, stored?
The correct answer is A. /opt/phoenix/cache. In FortiSIEM, SQLite databases used for baselining are stored in the /opt/phoenix/cache directory. This location is used for temporary storage and caching of profile data that is essential for anomaly detection and trend analysis. Baselining involves analyzing historical data…
Question
Where are the SQLite databases that are used for the baselining, stored?
Options
- A/opt/phoenix/cache
- B/opt/phoenix/bin
- C/opt/phoenix/config
- D/opt/phoenix/delta
How the community answered
(34 responses)- A91% (31)
- C6% (2)
- D3% (1)
Explanation
In FortiSIEM, SQLite databases used for baselining are stored in the /opt/phoenix/cache directory. This location is used for temporary storage and caching of profile data that is essential for anomaly detection and trend analysis. Baselining involves analyzing historical data to determine expected behavior patterns. SQLite databases store aggregated statistics, which are referenced during rule evaluations. The cache directory allows quick access to these values without querying the main database repeatedly.
Topics
Community Discussion
No community discussion yet for this question.