Introduction

The FortiAnalyzer Fabric enables centralized viewing of devices, incidents, and events across multiple FortiAnalyzers acting as members. In this mode, FortiAnalyzer Fabric members form a Fabric with one device operating in supervisor mode as the root device. Incident and event information is synced from members to the supervisor using the API.

The FortiAnalyzer Fabric is ideal for use in high volume environments with many FortiAnalyzers. For more information about sizing and design considerations, see the FortiAnalyzer Architecture Guide.

The FortiAnalyzer Fabric device operating as the supervisor includes the following modules:

Device Manager	Displays FortiAnalyzer Fabric members with their ADOMs and authorized logging devices.
FortiSoC	Displays the Event Monitor and Incidents panes. Administrators can view incidents and events created on member FortiAnalyzer Fabric.
System Settings	Configure the settings for the FortiAnalyzer supervisor. See the FortiAnalyzer Administration Guide.
Log View	Displays logs collected across the FortiAnalyzer Fabric. Each log includes the FortiAnalyzer Host Name and ADOM it was collected on.
Management Extensions	Enables supported management extension applications. See the FortiAnalyzer Administration Guide.

For information on the modules available as a FortiAnalyzer Fabric member, see the FortiAnalyzer Administration Guide.