|
The following procedure assumes that the OnSights are running Ubuntu, which is used by FortiMonitor as the default Linux distribution for image builds. It also assumes that the OnSights are all on the same major LTS version of Ubuntu (e.g. 24.n.n LTS).
If the above conditions are satisfied, then the following is the recommended best practice:
- Rotate out one cluster member, and wait for the rotate-out to complete.
- Update/Upgrade Ubuntu.
- If step 2 involves an OS reboot or an update of the Docker container infrastructure, the previous OnSight version may come back online after the reboot and put the OnSight in the rotation. Wait for that to complete, and then rotate it out again.
- Upgrade OnSight.
- Rotate the member back in.
- Verify it is working properly.
- Repeat steps 1 to 6 for the other HA cluster members, one at a time.
Notes:
In order to upgrade Ubuntu within a major revision, use 'sudo apt update' and 'sudo apt upgrade'. Most additional nuances will have been documented by Canonical. On the other hand, if the OnSights are not all on the same major LTS version of Ubuntu, the best method may be to add new members to the cluster and, once they are working, remove the old ones.
If a different Linux distribution was used for the OnSight, follow the specific method recommended to upgrade the OS for that distribution.
The FortiMonitor 'Rotating clustered OnSights' feature is explained in the corresponding section of the FortiCloud user guide.
A rotate-out operation before shutdown/reboot should prevent data gaps.
The OnSight upgrade process itself is available in the OnSight upgrade documentation.
|
