Troubleshooting Tip: phQueryMaster DOWN due to 'Failed to get/hget jsonConfig from redis' error in ClickHouse Database
| Description | This article describes the troubleshooting steps to resolve a phQueryMaster process down issue in v7.3x+, where the logs indicate a failure to retrieve the jsonConfig from Redis during a ClickHouse. |
| Scope | FortiSIEM v7.3x and later, with ClickHouse database. |
| Solution | When phQueryMaster fails to initialize, the following errors in /opt/phoenix/log/phoenix.log may be encountered even after attempting to restart the process with phtools --start phQueryMaster:
Follow the steps below to resolve the issue:
Verify Redis keys: On the Supervisor CLI, connect to Redis and check if the following keys return (nil) values:
redis-cli -p 6666 -a `phLicenseTool --showRedisPassword`
If these keys are missing (showing as (nil)), proceed with the service restarts below.
Restart Redis service:
/opt/phoenix/redis/bin/redis_ops.sh stop
Restart phClickHouseMonitor service:
systemctl stop phClickHouseMonitor
Test and deploy ClickHouse settings from the GUI:
Restart the phQueryMaster process:
After completing these steps, the phQueryMaster process should remain up and running. |