Configuring Organizations

Organizations can be defined in one of two ways:

  • Associating a Collector to an Organization – the devices monitored by a collector or the events sent to a collector automatically belong to the Organization.
  • Defining an IP range for an Organization – the devices monitored by the Supervisor node or the events sent to the Supervisor/Worker node are assigned to an Organization based on the sender IP address.

This section provides the procedures to configure an Organization for a multi-tenant FortiSIEM deployment.

Adding an Organization

Follow the procedure below to add an Organization:

  1. Go to ADMIN > Setup > Organizations tab.
  2. Click New
  3. In the Organization Definition dialog box, enter the information below.

    SettingsGuidelines
    Organization[Required] Name of the Organization
    Full NameFull name of the Organization
    Admin User[Required] User name of the Admin user for the Organization
    Admin Password[Required] Password of the Admin user for this Organization.
    Admin Email[Required] Email id of the Admin user for this Organization.
    Include IP/IP RangeIP or IP range for the Organization in case the Organization is defined by IP addresses.
    Exclude IP/IP Range IP or IP range to be excluded for the Organization.
    Max DevicesMaximum number of monitored CMDB devices for the Organization
    PhoneContact number for the Organization
    AddressContact address for the Organization
  4. If your Organization uses Collectors, click New under Collectors and enter the information below.

    SettingsGuidelines
    Name[Required] Name of the Collector
    Guaranteed EPS[Required] Events from this Collector are always accepted when its event rate is below this Guaranteed EPS. FortiSIEM will re-allocate excess EPS (license minus the sum of Guaranteed EPS over all the collectors) based on need but the allocation will never go below the Guaranteed EPS.
    Start Time[Required] Select a specific start date or check 'Unlimited'. Collectors will not work outside of start and end dates if specific dates are chosen.
    End Time[Required] Select a specific end date or check 'Unlimited'. Collectors will not work outside of start and end dates if specific dates are chosen.
  5. Click Save to save the Collector information.
    The new Collector information will be listed in the table. You can use the Edit button to modify or Delete button to remove any Collector added.
  6. Enter any Description about the Organization.
  7. Click Save.

Modifying an Organization

Follow the procedure below to modify an Organization:

  1. Select the Organization from the list and click the required option below:
    • Edit - to modify any Organization settings. To edit the Collector information, use the Edit button under Collectors.
    • Delete - to delete an Organization.
  2. Click Save to apply the changes to the Organization.