20 Questions
Which nodes send the calculated incoming EPS to the central decision-making engine?
Supervisors
How are the unused events calculated?
By subtracting the total incoming events from the licensed EPS
What is the total incoming EPS from the three collectors in the example?
175
What is the total unused events in the example?
71,460
What is the EPS reservoir used for?
To store events during event bursts
When does the process of building up the EPS reservoir start over for the next day?
At midnight
What happens to the number of events that can be carried over to the next day at midnight?
It is decreased by 50%
What is the total number of allowed events for the next three-minute interval?
Licensed EPS plus unused reservoir
What is the bonus 10% buffer used for?
To store additional events
What is the final total number of allowed events for the next three-minute interval in the example?
191,862
Which component of FortiSIEM manages Windows and Linux agents?
Agent manager component
What file contains information about the licensed, allowed, used, and unused (reservoir) values every three minutes?
phoenix.log
What is the purpose of the EPS reservoir in FortiSIEM?
To store events that exceed the license limit
What are the features supported by the FortiSIEM Windows agent?
All of the above
How are logs collected by the FortiSIEM Linux agent delivered to FortiSIEM?
Via the Syslog facility
What is the supervisor node responsible for in FortiSIEM?
Managing Windows and Linux agents
What type of nodes are optional in a FortiSIEM deployment?
Worker node
What functionality does the FortiSIEM Linux agent provide for file integrity monitoring (FIM)?
All of the above
Where can you view the licensed, used, and unused values in FortiSIEM?
Usage page on the GUI
What is the purpose of the 10% buffer in the EPS calculation for the next three-minute interval?
To provide a safety margin for sudden event spikes
Test your knowledge of unused events in event processing systems with this quiz. Learn about how incoming EPS is calculated and how to determine the number of unused events.
Make Your Own Quizzes and Flashcards
Convert your notes into interactive study material.
Get started for free
