Skip to main content
knjuguna
New Member
Apr 22, 2024 2:14 PM UTC
Solved

phFortiInsightAI process down

We issued reboot command to Worker node in fortiSIEM 7.1.3 ,

phFortiInsightAI process still down and does not start on  phtools --restart phFortiInsightAI

anyone who has encountered this ?

mnovelli
mnovelliAnswer
Staff
May 2, 2024 12:26 PM UTC

Hello @knjuguna . Is phFortiInsighAI active on Supervisor (run phstatus command). 

Have you tried to have a look to logs (/opt/phoenix/log/phoenix.log). Please try to run phtools --start phFortiInsightAI command on Worker and check if you retrieved some error from the log file /opt/phoenix/log/phoenix.log 

13 replies

ssudhakar
Staff
Staff
Apr 22, 2024 4:29 PM UTC

Hello there :

 

Can you try using the following ??

 

systemctl restart phFortiInsightAI

 

Please let me know if that works!

 

-/Hope

knjuguna
knjugunaAuthor
New Member
Apr 23, 2024 7:08 AM UTC

Hello @ssudhakar status still the same, process is still down

ssudhakar
Staff
Staff
Apr 23, 2024 4:02 PM UTC

Can you try to stop and start rather than restart ?

 

systemctl stop phFortiInsightAI

systemctl start phFortiInsightAI

 

Do you see anything happening when you do this ? Like any dump/message on CLI ?

knjuguna
knjugunaAuthor
New Member
Apr 24, 2024 9:40 AM UTC

nothing is happening, there is no any dump/message on cli after running commands

 

knjuguna
knjugunaAuthor
New Member
Apr 25, 2024 8:15 AM UTC

phFortiInsightAI process is still down and cant start even after rebooting the worker again

mnovelli
Staff
mnovelliAnswer
Staff
May 2, 2024 12:26 PM UTC

Hello @knjuguna . Is phFortiInsighAI active on Supervisor (run phstatus command). 

Have you tried to have a look to logs (/opt/phoenix/log/phoenix.log). Please try to run phtools --start phFortiInsightAI command on Worker and check if you retrieved some error from the log file /opt/phoenix/log/phoenix.log 

mnovelli
Staff
Staff
May 2, 2024 12:31 PM UTC

moreover, did you upgrade Fortisiem recently?

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT