FortiSIEM is a highly scalable multi-tenant Security Information and Event Management (SIEM) solution that provides real-time infrastructure and user awareness for accurate threat detection, analysis and reporting. FortiSIEM first discovers the infrastructure including devices, applications, users in physical/virtual, on-premise / cloud environments and auto-populates a Configuration Management Database (CMDB). FortiSIEM can collect various data such as logs, traffic flows, performance metrics, configuration changes and correlates them in real time to detect security and performance issues. FortiSIEM has built-in integrations with the Fortinet portfolio and support for hundreds of third-party devices and applications for data collection, major external threat intelligence sources, major ticketing systems. FortiSIEM has a purpose-built architecture that can scale collection, real-time correlation and reporting by incrementally adding virtual appliances without any downtime.