Technical Tip: Resolving Content update failed on importing default dashboard error

Description

This article describes how to resolve the issue where FortiSIEM content update fails while importing the default dashboard XML file.

Scope

FortiSIEM.

Solution

During content update, the following error may be observed: ImportingXMLfile:

/opt/phoenix/cache/content/data/phoenix/data-definition/DefaultH5Dashboards.xml

Checked the error in the app server logs, which should be like below:

java.lang.Exception: Http response error code : 500, error msg: <?xjml version="1.0" encoding="UTF-8" standalone="yes"?> <response requestId="0" timestamp="1771331409580"> <error code="255"> <description>Unknown error</description> </error> </response> at com.ph.phoenix.tool.cmd.CommandHelper.validationResponse(CommandHelper.java:9) at com.ph.phoenix.tool.cmd.ConfigXmlImportCommand.importFile(ConfigXmlImportCommand.java:129) at com.ph.phoenix.tool.cmd.ConfigXmlImportCommand.importData(ConfigXmlImportCommand.java:81) at com.ph.phoenix.tool.cmd.ConfigXmlImportCommand.executeCommand(ConfigXmlImportCommand.java:57) at com.ph.phoenix.tool.cmd.AbstractCommand.execute(AbstractCommand.java:89) at com.ph.phoenix.tool.PhoenixCLI.main(PhoenixCLI.java:46)

The issue was resolved using the following steps:

1. Delete from ph_dashboard.

2. Reimport the dashboard:
   
   

# cd /opt/phoenix/data-definition/

# /opt/phoenix/deployment/phoenixCLI.sh import -host localhost -port 8181 -cust system -user admin -pass $(phLicenseTool --showDatabasePassword) -type H5Dashboard -file "DefaultH5Dashboards.xml"

# /opt/phoenix/deployment/importSD.sh localhost 5432 phoenixdb phoenix $(phLicenseTool --showDatabasePassword) INITDATA

3. From GUI: Rerun the content update successfully.