FortiSIEM 503 service unavailable error

[jiahaol]

When I tried to install FortiSIEM on a vm by using version FSM_Full_All_ESX_7.4.0_build0435, all looks good but when I try to access my vm by https://<my vm ip> it shows service unavailable error like following.

 But if I use ssh to access it then it is good. 

@Anthony_E  @Secusaurus could you please help here

[Secusaurus]

Hi @jiahaol,

Did the installation script run successful (as far as I remember, the VM also reboots after finishing)?

After the initial installation and every reboot, the services need some time to come up, so the "Service Unavailable" is very common for the first few minutes. Reason is, that the webserver/-proxy is already there but the main application (phoenix) is not ready yet and does not respond to the webproxy. After some time, phoenix will be there and you should see the full system.

If it stays on this state for more than 10 minutes, phoenix probably didn't come up.

I have not seen this on a fresh installation, only after custom modifications or an upgrade for a system that had a lot of custom modifications in it.

So, did you do anything more than the initial installation script? Did you use fips?

Best,

Christian

[jiahaol · Accepted solution]

Hi Christian,

I only met this error when I use worker mode, but supervisor mode is good now. And I don't really need worker mode, so I am good now.

Just let you know when I use worker mode I can consistently see this error, and it will appear no matter I use fips or not. and I didn't do anything more than the initial installation script.

Best,

Jiahao

[Secusaurus]

For anyone reading this in future:

Workers do not have a web interface. You will always see this "error" on workers. Only a supervisor has a web view.

So, this is an expected behavior.

Best, 

Christian