Skip to main content
koolishami
Staff
December 20, 2024

Troubleshooting Tip: FortiSOAR GUI Inaccessibility Due to Duplicate Field in Custom Alert Module

  • December 20, 2024
  • 0 replies
  • 371 views
Description

This article describes how to troubleshoot FortiSOAR GUI inaccessibility caused by a duplicate field in the Alert module. The issue results in system publish failures and errors during updates, impacting the GUI and playbook functionality.

Scope FortiSOAR v7.x+.
Solution

Root Cause:

The issue occurs when a duplicate field is added in the Alert module, causing the system publish process to fail with the following error:

 

Compile Error: Cannot redeclare App\Entity\Custom\Alert::<Function>()

in /opt/cyops-api/src/Entity/Custom/Alert.php on line <LineNumber>

 

Steps to Resolve:

 

  1. Verify the Error in Logs.

Check the system publish log to confirm the error:

 

# sudo tail -n 100 /var/log/cyops/cyops-api/last_system_publish.log

 

Look for a compile error similar to:

 

PHP Fatal error: Cannot redeclare App\Entity\Custom\Alert::XXXXXXXXXX()

in /opt/cyops-api/src/Entity/Custom/Alert.php on line 6475

 

  1. Clear Cache and Revert Metadata.

Run the following commands to clear the cache and revert metadata:

 

# sudo -u nginx php /opt/cyops-api/bin/console cache:clear

# sudo -u nginx php /opt/cyops-api/bin/console app:metadata:revert

 

  1. Update the System.

Execute the system update command:

 

# sudo -u nginx php /opt/cyops-api/bin/console app:system:update

 

If the GUI remains inaccessible, re-run the command with the -lah argument:

 

# sudo -u nginx php /opt/cyops-api/bin/console app:system:update -lah

 

  1. Restart Services.

Restart FortiSOAR services to ensure all components are functioning correctly:

 

# sudo csadm services --restart

 

  1. Verify GUI and Playbook Functionality.

Confirm that the GUI is now accessible and ensure playbooks are active and functioning properly.

 

Note:

If a '500 Server Error' occurs during playbook execution, re-check the system configuration and services.

 

Possible Steps Leading to the Issue:

  1. Adding a new field.
  2. Deleting the field.
  3. Adding another field with a duplicate name.
  4. Publishing the module.
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.