In FortiSIEM enterprise licensing mode, it the link between the collector and data center FortiSlEM cluster is down, what happens?

Question

Options

• AThe collector drops incoming events like syslog, but stops performance collection.
• BThe collector processes stop, and events ate dropped.
• CThe collector continues performance collection of devices, but stops receiving syslog.
• DThe collector buffers events

• A
  6% (2)
• B
  3% (1)
• C
  16% (5)
• D
  75% (24)

Explanation

Enterprise Licensing Mode: In FortiSIEM enterprise licensing mode, collectors are deployed in remote sites to gather and forward data to the central FortiSIEM cluster located in the data Collector Functionality: Collectors are responsible for receiving logs, events (e.g., syslog), and performance metrics from devices. Link Down Scenario: When the link between the collector and the FortiSIEM cluster is down, the collector needs a mechanism to ensure no data is lost during the disconnection. Event Buffering: The collector buffers the events locally until the connection is restored, ensuring that no incoming events are lost. This buffered data is then forwarded to the FortiSIEM cluster once the link is re-established.

No community discussion yet for this question.