Skip to main content
Iescudero
Iescudero
New Member
January 20, 2020
Question

FortiSIEM Health Critical

  • January 20, 2020
  • 1 reply
  • 7937 views

Hi there!

 

I'm using FortiSIEM 5.2.7. I was trying to upgrade a collector from the supervisor and I for an unknown reason, the supervisor couldn't reach the collector, so i rebooted it.

When the supervisor turned on, I found that the healt is now Critical

When I use Phstatus I found this:

 

PROCESS UPTIME CPU% VIRT_MEM RES_MEM

phParser DOWN phQueryMaster DOWN phRuleMaster DOWN phRuleWorker DOWN phQueryWorker DOWN phDataManager DOWN phDiscover DOWN phReportWorker DOWN phReportMaster DOWN phIpIdentityWorker DOWN phIpIdentityMaster DOWN phAgentManager DOWN phCheckpoint DOWN phPerfMonitor DOWN phReportLoader DOWN phBeaconEventPackager DOWN phDataPurger DOWN phEventForwarder DOWN phMonitor 13:45 0 979m 539m Apache 14:22 0 224m 6096 Node.js-charting 14:16 0 923m 74m Node.js-pm2 13:46 0 0 73m AppSvr 15:53 0 10972m 2589m DBSvr 16:07 0 376m 28m Redis 15:54

 

Is there a way to start all of this services?

 

Thank you!

    1 reply

    Darryl_T_FTNT
    Staff
    Darryl_T_FTNT
    Staff
    January 20, 2020

    Hi,

    Have you tried phtools?  phtools --start all

    Cheers

    Darryl

      Iescudero
      IescuderoAuthor
      New Member
      January 20, 2020

      Hi there! It seems that something was wrong with ssl.conf file. I changed the server certificate and it seems that I made a change that corrupted in some way these modules.

      I rolledback that file, I made the configuration again and all modules started.

       

      Thank you!

       

      Terms & ConditionsAccessibility statement