Fortinet FortiSIEM 500F - Register Collectors via SSH Script; Step 6: Using FortiSIEM

Appliance Setup
7.
SSH to the Collector and run following script to register Collectors:
phProvisionCollector --add <user> <password> <Super IP or Host> <Organization>
<CollectorName>
a.
Set user and password use the admin User Name and password for the Supervisor.
b.
Set Super IP or Host as the Supervisor's IP address.
c.
Set Organization as the name of an organization created on the Super.
d. Set CollectorName from Step 6 by command line, for example:
# phProvisionCollector --add admin Admin*11 172.30.53.130 ORG1289 CO1289
A message will display after the completion:
Continuing to provision the Collector
This collector is registered successfully. Normal Exit and restart of phMonitor
after collector license registration.
The Collector will reboot during the Registration.
8. Go to ADMIN > Health > Collector Health to see the status of the Collector.
Step 6: Using FortiSIEM
Refer to the FortiSIEM User Guide for detailed information about using FortiSIEM.
FortiSIEM 6.1.2 500F Collector Configuration Guide 12
Fortinet Technologies Inc.