Skip to main content
jiahaol
Staff
Staff
June 23, 2025
Solved

FortiSIEM 503 service unavailable error

  • June 23, 2025
  • 3 replies
  • 1210 views

When I tried to install FortiSIEM on a vm by using version FSM_Full_All_ESX_7.4.0_build0435, all looks good but when I try to access my vm by https://<my vm ip> it shows service unavailable error like following.

 
 

image.jpeg

 But if I use ssh to access it then it is good. 

@Anthony_E  @Secusaurus could you please help here

    Best answer by jiahaol

    Hi Christian,

     

    I only met this error when I use worker mode, but supervisor mode is good now. And I don't really need worker mode, so I am good now.

    Just let you know when I use worker mode I can consistently see this error, and it will appear no matter I use fips or not. and I didn't do anything more than the initial installation script.

     

    Best,

    Jiahao

    3 replies

    Secusaurus
    Contributor III
    June 24, 2025

    Hi @jiahaol,

     

    Did the installation script run successful (as far as I remember, the VM also reboots after finishing)?

     

    After the initial installation and every reboot, the services need some time to come up, so the "Service Unavailable" is very common for the first few minutes. Reason is, that the webserver/-proxy is already there but the main application (phoenix) is not ready yet and does not respond to the webproxy. After some time, phoenix will be there and you should see the full system.

     

    If it stays on this state for more than 10 minutes, phoenix probably didn't come up.

    I have not seen this on a fresh installation, only after custom modifications or an upgrade for a system that had a lot of custom modifications in it.

    So, did you do anything more than the initial installation script? Did you use fips?

     

    Best,

    Christian

    NSE8 | Fortinet Advanced MSSP Partner
    jiahaol
    Staff
    jiahaolAuthorAnswer
    Staff
    June 24, 2025

    Hi Christian,

     

    I only met this error when I use worker mode, but supervisor mode is good now. And I don't really need worker mode, so I am good now.

    Just let you know when I use worker mode I can consistently see this error, and it will appear no matter I use fips or not. and I didn't do anything more than the initial installation script.

     

    Best,

    Jiahao

    Secusaurus
    Contributor III
    June 24, 2025

    For anyone reading this in future:

    Workers do not have a web interface. You will always see this "error" on workers. Only a supervisor has a web view.

     

    So, this is an expected behavior.

     

     

    Best, 

    Christian

    NSE8 | Fortinet Advanced MSSP Partner
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.