QuestionQ58

VerifiedAnalytics

Which two processes execute analytical queries and must always be running for searches to work?

Choose two
Explanation

FortiSIEM uses phQueryMaster to handle and parallelize ad hoc EventDB queries and combine their results, while phQueryWorker handles the individual query tasks dispatched by the master. Both processes are therefore required for analytical searches.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!