Inventory
The INVENTORY tab displays separate pages for COLLECTORS, IoT (devices) and System Components (AGGREGATORS, CORES and REPOSITORIES). Click the down arrow next to INVENTORY and then select the relevant option to access its page, as shown below.
This view enables you to monitor system health and to define Collector Groups. If you have a large system with thousands of FortiEDR Collectors, it may take a few moments to populate this window.
By default, the INVENTORY tab and its various pages are filtered to display all the FortiEDR components that are degraded, except for FortiEDR Collectors, which are filtered to see all Collectors, regardless of their state.
If there are Collectors in the Degraded state, the following indication appears at the right top corner, which you can click to filter the view to only show the Collectors in the Degraded state.
You can select to display all Collectors that are in one of the specific states (New, Running, Disabled, Degraded, Disconnected, Isolated, Selected, Pending Reboot, Migrated, Pending Migration, or Unmanaged) using the dropdown menu at the top left of the window, as shown below:
When a new FortiEDR Collector registers, an indicator displays on the INVENTORY tab.
The X/Y numbers in the Collector Group Name column indicate the following:
-
X indicates the number of Collectors, based on the filter option selected ((New, Running, Disabled, Degraded, Disconnected, Isolated, Selected, or Pending Reboot), as described on the preceding page.
-
Y indicates the total number of Collectors in the Collector Group to which the Collector belongs.
For example, the figure below shows 4/4 for the Collector Group named 5.0.1, which means that there are 4 Collectors that are Running in a Collector Group containing 4 Collectors.
The Connect to Device button opens a console that provides direct access to FortiEDR-protected devices. See Administration. |
To export the list of FortiEDR components:
Use the Export button and select Excel.
Uninstalling a Collector
Use the Uninstall button to uninstall a Collector from a device. Use caution when using this option, as a Collector cannot be reinstalled after removal using the FortiEDR user interface. Therefore, it is recommended to disable a Collector using the Enable/Disable option rather than uninstalling it.