Introduction

The FortiAnalyzer Federation enables centralized viewing of devices, incidents, and events across multiple FortiAnalyzers acting as members. In this mode, FortiAnalyzer Federation members form a Fabric with one device operating in supervisor mode as the root device. Incident and event information is synced from members to the supervisor using the API.

The FortiAnalyzer Federation device operating as the supervisor includes the following modules:

Device Manager	Displays FortiAnalyzer Federation members with their ADOMs and authorized logging devices.
FortiSoC	Displays the Event Monitor and Incidents panes. Administrators can view incidents and events created on member FortiAnalyzer Federation.
System Settings	Configure the settings for the FortiAnalyzer supervisor. See the FortiAnalyzer Administration Guide.
Management Extensions	Enables supported management extension applications. See the FortiAnalyzer Administration Guide.

For information on the modules available as a FortiAnalyzer Federation member, see the FortiAnalyzer Federation Administration Guide.