A service provider purchased a 500-EPS license and configured a new collector with 100 EPS for customer A, and another collector with 200 EPS for customer B.
How much is in the remaining EPS pool for future customers and for MSSP itself?
Refer to the exhibit.
Which scenario is not a supported nested query scenario?
Refer to the exhibit.
An administrator runs an analytic search for all FortiGate SSL VPN logon failures. The results are grouped by source IP, reporting IP, and user. The administrator wants to restrict the results to only those rows where the COUNT >=3.
Which user would meet that condition?
Which three statements about collector communication with the FortiSIEM cluster are true? (Choose three.)
Refer to the exhibit.
If the Z-score for this rule is greater than or equal to three, what does this mean?
Why do collectors communicate with the Supervisor after registration? (Choose two.)
Refer to the exhibit.
Is the Windows agent delivering event logs correctly?
Refer to the exhibit.
Consider a custom lookup tableMalwareIPList. An analyst constructed an analytic query to reference theMalwareIPListlookup table.
What is the outcome of the analytic query?
A service provider purchases a licensed EPS of 520. The guaranteed EPS allocated to three customers is 50, 100, and 150 respectively. At the end of every three-minute interval, incoming EPS is calculated at every collector and the value is sent to the central decision-making engine on the supervisor node.
The incoming EPS for the first collector is 25. the incoming EPS for the second collector is 50, and the incoming EPS for the third collector is 75.
Based on the information provided, what is the unused events total calculated by the supervisor?