| Solution | To upgrade the collector node to the same or lower version of the supervisor, follow these steps: - Check connectivity from the Supervisor node to the URL update.fortiguard.net by port 443 because FortiSIEM communicates with FortiGuard to verify the checksum of the image. If the supervisor is unable to reach update.fortiguard.net, the process will fail.
- Make sure the collector can resolve the hostname of the supervisor because the hostname will be used to build the URL to download the image from the collector node.
- Check that the collector can access the following URLs through port 443: os-pkgs-cdn.fortisiem.fortinet.com and os-pkgs-r8.fortisiem.fortinet.com.
- Download the target Upgrade Image from the Fortinet Support Site. For example, FSM_Upgrade_All_7.1.5_build0181.zip.
- Go to ADMIN -> Settings -> Systems -> Image Server.
- Under Collector in the Version field, enter the version. For example, 7.1.5.
- Under Collector, choose Select File and Upload File.
- The following SQL can be used to check the ImageSetup task was completed:
psql phoenixdb phoenix -c "SELECT type, progress from ph_task where type = 'ImageSetup';" 6. Go to ADMIN -> Health -> Collector Health. - From Columns, select the Download Status and Version.
- Select the Collector(s), go to the Action drop-down list, and select Download Image.
- The following SQL can be used to check the Download Image task was completed:
psql -U phoenix phoenixdb -c "SELECT progress from ph_task where type='DownloadImage';" - The download progress can also be checked locally on the Collector node by running the command:
ll -h /opt/upgrade Note: During a download task, if the error 'Operation timed out: Collector is not responding' is encountered, the task fails. Although the file may still be copied to the Collector, the task must be restarted. 
- Select the Collector(s) to upgrade.
- From the Action drop-down list, select Install Image.
- The following SQL can be used to check the Upgrade Image task was completed.
psql -U phoenix phoenixdb -c "SELECT progress from ph_task where type='UpgradeImage';" - If the Collector is not able to resolve the FQDN of the SUP, an error indicating that the Install Image is not working will appear. To work around this issue, add a DNS entry on collector /etc/hosts file like the following example: 10.0.1.21 SUP_FQDN.org. Keep in mind that the name entered to associate that IP address must be the domain name that was configured at the SUP installation, which can be checked under ADMIN -> License -> Nodes.
- Try again the installation from the Action drop-down list, select Install Image.
- The collector will be rebooted after the upgrade is successful. Go to Admin -> Health -> Collector Health to check it is running the upgraded version and that all processes are up and running.
- If the upgrade fails, download the following files from the collector, open a ticket with technical support, and provide the files:
/opt/phoenix/log/collector-upgrade.log /usr/local/upgrade/logs/ansible.log Related document: Image Server Settings - Fortinet Help |
