Skip to main content
knjuguna
New Member
April 22, 2024
Solved

phFortiInsightAI process down

  • April 22, 2024
  • 3 replies
  • 6334 views

We issued reboot command to Worker node in fortiSIEM 7.1.3 ,

phFortiInsightAI process still down and does not start on  phtools --restart phFortiInsightAI

anyone who has encountered this ?

Best answer by mnovelli

Hello @knjuguna . Is phFortiInsighAI active on Supervisor (run phstatus command). 

Have you tried to have a look to logs (/opt/phoenix/log/phoenix.log). Please try to run phtools --start phFortiInsightAI command on Worker and check if you retrieved some error from the log file /opt/phoenix/log/phoenix.log 

3 replies

ssudhakar
Staff
Staff
April 22, 2024

Hello there :

 

Can you try using the following ??

 

systemctl restart phFortiInsightAI

 

Please let me know if that works!

 

-/Hope

knjuguna
knjugunaAuthor
New Member
April 23, 2024

Hello @ssudhakar status still the same, process is still down

ssudhakar
Staff
Staff
April 23, 2024

Can you try to stop and start rather than restart ?

 

systemctl stop phFortiInsightAI

systemctl start phFortiInsightAI

 

Do you see anything happening when you do this ? Like any dump/message on CLI ?

knjuguna
knjugunaAuthor
New Member
April 24, 2024

nothing is happening, there is no any dump/message on cli after running commands

 

knjuguna
knjugunaAuthor
New Member
April 25, 2024

phFortiInsightAI process is still down and cant start even after rebooting the worker again

mnovelli
Staff
mnovelliAnswer
Staff
May 2, 2024

Hello @knjuguna . Is phFortiInsighAI active on Supervisor (run phstatus command). 

Have you tried to have a look to logs (/opt/phoenix/log/phoenix.log). Please try to run phtools --start phFortiInsightAI command on Worker and check if you retrieved some error from the log file /opt/phoenix/log/phoenix.log 

mnovelli
Staff
Staff
May 2, 2024

moreover, did you upgrade Fortisiem recently?