Creating the FortiAnalyzer deployment image

To create the FortiAnalyzer deployment image:

1. In the Prism Element web console, go to VM > Create VM.
2. For General Configuration and Compute Details, enter the following configuration information:
   1. In the NAME field, enter a name for your VM, for example, FortiAnalyzer-VM.
   2. In the VCPU(S) field, enter 2.
   3. In the MEMORY field, enter 4.

      

3. By default, a CD-ROM is listed under Disks. Delete the CD-ROM.

   You must create a boot disk and a data disk for the VM.

4. Create the boot disk:
   1. Click Add New Disk.
   2. The boot disk will be cloned from the VM image that you uploaded. Under OPERATION, select Clone from Image Service.
   3. Under BUS TYPE, select SATA.
   4. Under IMAGE, select the FortiAnalyzer disk image.
   5. Click Add. The boot disk has been added.

      

5. Create the data disk by first Clicking Add New Disk.
   1. Under OPERATION, select Allocate on Storage Container.
   2. Under BUS TYPE, select SATA.
   3. Under SIZE (GB), enter 200.
   4. Click Add. The data disk has been added.

      

6. Add a network interface for the VM.
   1. Under Network Adapters (NIC), click Add New NIC.
   2. Under VLAN NAME, select NR_PRT_STATIC.

      

   3. Click Add.
7. Click Save.

   The system displays a Successfully submitted Create operation message when the VM has been created successfully with no error.

The FortiAnalyzer-VM requires at least two virtual hard disks. Before powering on the FortiAnalyzer-VM, you must add at least one more virtual hard disk (ideally above 500 GB). The VM should therefore be configured with the following disks: The default hard drive that contains the OS and should not be modified. One or more additional disks, for example Disk1 and Disk2, used by LVM for logs, reports, swap, and other storage requirements. The default virtual hard disk storage size should not be modified to increase capacity, only increasing Disk1 or adding extra disks will extend LVM disk on the FortiAnalyzer-VM.