Scalable Architecture
FortiSIEM 6.6.0 and later with integrated ClickHouse provides an efficient, massively scalable solution for high performance event processing. Some examples of the scalability offered by FortiSIEM 6.6.0 with ClickHouse:
|
Supervisor & Worker Nodes |
Max Events per Second (EPS) |
Database Replication |
|---|---|---|
|
1 |
20,000 |
N |
|
4 |
60,000 |
Y |
|
12 |
250,000 |
Y |
|
38 |
1,000,000 |
Y |
See the latest FortiSIEM Sizing Guides at https://docs.fortinet.com/product/fortisiem/ for the latest full scalability figures.
The efficient scalability of FortiSIEM 6.6.0 and later means organizations can deploy a scalable solution from day one.
Another consideration with the sizing of the environment is the event logs size, for example larger average events can have a performance requirement increase as the overhead to insert the larger event into the database increases.