FortiSIEM Discussions
gauravpawar
New Contributor III

ClickHouseServer service is down

Dear All,

We are having following issue 

ClickHouseServer service on the worker is currently down, and no incidents or events are being ingested.

Could someone help me to solve this issue ?  What could be the possible reasons for it ?

@Anthony_E @Secusaurus   please help 

 

1 Solution
Secusaurus
Contributor III

Hi @gauravpawar,

 

If this happened out of the blue, then the best way to go is to open a support ticket. Attach the aologs of supervisor and worker to the ticket then (`phziplogs /tmp/clickhouse-down 2`)

If this happened after a change: What was the change?

 

Often, restarting the process (`phtools --stop all`, then `phtools --start all`) or rebooting the machine solves temporary issues. However, ClickHouseServer down more likely results from a config change/inconsistency.

 

Best,

Christian

FCX #003451 | Fortinet Advanced Partner

View solution in original post

FCX #003451 | Fortinet Advanced Partner
2 REPLIES 2
Secusaurus
Contributor III

Hi @gauravpawar,

 

If this happened out of the blue, then the best way to go is to open a support ticket. Attach the aologs of supervisor and worker to the ticket then (`phziplogs /tmp/clickhouse-down 2`)

If this happened after a change: What was the change?

 

Often, restarting the process (`phtools --stop all`, then `phtools --start all`) or rebooting the machine solves temporary issues. However, ClickHouseServer down more likely results from a config change/inconsistency.

 

Best,

Christian

FCX #003451 | Fortinet Advanced Partner
FCX #003451 | Fortinet Advanced Partner
Anthony_E
Community Manager
Community Manager

Hi Gaurav,

 

i moved your post in the FortiSIEM discussion. You will have more chance to get a FortiSIEM expert.

I invite you to post your future FortiSIEM post directly there :)!

 

Regards,

Anthony

Anthony-Fortinet Community Team.