FortiSIEM UEBA events via the FortiSIEM Agent is a licensed capability.
FortiSIEM 6.6.0 or greater is required.
FortiSIEM FortiGuard IOC subscription will be required for “Traffic to FortiGuard Threat Feed” to detect threats.