Technical Tip: How to reset the license

When an existing node has been removed from the FortiSIEM cluster but needs to be inserted again, or for troubleshooting reasons, it is required to reset the license information present in the node:

1. Remove license file from super CLI as root:

cd /etc/opsd/

ls -la

drwxr-xr-x 2 admin admin 27 Mar 12 2024 .
drwxr-xr-x. 115 root root 8192 Feb 10 14:54 ..
-rw-rw-r-- 1 admin admin 12673 Mar 12 2024 .fortisiem4x0

mv .fortisiem4x0 /tmp/

killall -9 phMonitor

phstatus # wait for the phMonitor to come back

2. Upload the license again on super with https://super_ip/phoenix/licenseUpload.jsf or register the collector/worker again.

Related article: