Configuring Organizations
Organizations can be defined in one of two ways:
- Associating a Collector to an Organization – the devices monitored by a collector or the events sent to a collector automatically belong to the Organization.
- Defining an IP range for an Organization – the devices monitored by the Supervisor node or the events sent to the Supervisor/Worker node are assigned to an Organization based on the sender IP address.
This section provides the procedures to configure an Organization for a multi-tenant FortiSIEM deployment.
Adding an Organization
Follow the procedure below to add an Organization:
- Go to ADMIN > Setup > Organizations tab.
- Click New.
- In the Organization Definition dialog box, enter the information below.
Settings Guidelines Organization [Required] Name of the Organization Full Name Full name of the Organization Admin User [Required] User name of the Admin user for the Organization Admin Password [Required] Password of the Admin user for this Organization. Admin Email [Required] Email id of the Admin user for this Organization. Include IP/IP Range IP or IP range for the Organization in case the Organization is defined by IP addresses. Exclude IP/IP Range IP or IP range to be excluded for the Organization. Max Devices Maximum number of monitored CMDB devices for the Organization Phone Contact number for the Organization Address Contact address for the Organization - If your Organization uses Collectors, click New under Collectors and enter the information below.
Settings Guidelines Name [Required] Name of the Collector Guaranteed EPS [Required] Events from this Collector are always accepted when its event rate is below this Guaranteed EPS. FortiSIEM will re-allocate excess EPS (license minus the sum of Guaranteed EPS over all the collectors) based on need but the allocation will never go below the Guaranteed EPS. Start Time [Required] Select a specific start date or check 'Unlimited'. Collectors will not work outside of start and end dates if specific dates are chosen. End Time [Required] Select a specific end date or check 'Unlimited'. Collectors will not work outside of start and end dates if specific dates are chosen. - Click Save to save the Collector information.
The new Collector information will be listed in the table. You can use the Edit button to modify or Delete button to remove any Collector added. - Enter any Description about the Organization.
- Click Save.
Modifying an Organization
Follow the procedure below to modify an Organization:
- Select the Organization from the list and click the required option below:
- Edit - to modify any Organization settings. To edit the Collector information, use the Edit button under Collectors.
- Delete - to delete an Organization.
- Click Save to apply the changes to the Organization.