Technical Tip: How upgrade FortiSIEM Supervisor and Workers
Description
This article describes how to download the FortiSIEM upgrade image for workers and supervisor.
Scope
FortiSIEM support to download the image.
For FortiSIEM Supervisor and Workers.
Solution
Order of upgrades between supervisor and workers is strictly:
- Upgrade the Supervisor.
- Upgrade the Workers.
Obtaining the upgrade image to prepare the upgrade:
- Log into Fortinet support site: Support.
- Go to Download -> Firmware Images.
- Select Product -> FortiSIEM.
- Download.
- Select the appropriate version and download the upgrade zip file.
Note: Upgrade files are marked beginning with FSM_Upgrade_Super-Worker. All other files to download are full images and should be avoided for upgrades.
Uploading the image to the supervisor and/or worker:
- Using an upload utility like WinSCP or any other file transfer client that allows for SCP or SFTP, upload the file.
The default username and default password is as follows: root / ProspectHills.
Note: Change the default username and password if it is still the default.
Preparing for the Upgrade:
- Unpack the zip file.
Example: unzip FSM_Upgrade_Super-Worker_All_5.2.5_build1615.zip.
Note: The file name will contain the version+build number, so the above is an example command.
Verify the md5sum against the support site's md5sum, and contact Support if they differ.
- Run: /pbin/phdownloadimage file:///<folder path of the zip that has been unzipped>.
Example: /pbin/phdownloadimage file:///tmp/5.2.5.1615/.
Note: The command phdownloadimage will prepare the file by further unpackaging and verifying its contents.
Upgrading:
Upgrading the Supervisor will take 15minutes at least, up to 1+ hours. The determination of time depends on the health and current operations of the machine. It is advisable to perform some type of health check against the supervisor before an upgrade occurs. The Database update will take the longest to occur due to the amount of data it contains, because of the necessary schema changes.
- Run: screen.
- Run: /pbin/phupgradeimage.
There will be times when the machine does not provide too much feedback. Monitor health and usage while the upgrade occurs, and do not cancel the upgrade at any time. If there is a failure from the upgrade, contact Support for further investigation.
Related article:
