FortiSIEM Collector Upgrade Issue

[adem_netsys]

Hi, 

I upgraded supervisor from 7.0.2 to 7.1.1. When I want to use Collector, I get the error "Operation timed out. Collector is not responding." What is the reason? Image is installed, but I cannot action>download.

[Goutham_FTNT]

Hi @adem_netsys 

I didn't get any logs to check however I was suspecting the 7za issue on the collector 
From your collector please install this package - yum install p7zip
Then try the install again from the GUI

If that's not helping - I would suggest session to resolve this quick - Do you have a TAC ticket for this issue ?

[KarlH]

Hello, 

I am also noticing this same issue. But the collectors are already registered , and reporting and showing healthy in the Admin Collector health view.  I am still getting this error when I try to Download.  But how are they reporting and reading the supervisor queue? As I understand the Collectors read the queue very few seconds on the supervisor, if the collectors are already sending data to supervisor how are they doing this without /etc/host file entry entry assuming that's the issue? 

~Karl

[adem_netsys]

Hi @Goutham_FTNT @FSM_FTNT 

Is there a command or method that I can upgrade Collector via CLI as an alternative to image?

[KarlH]

HI yes

Yes you can upgrade the collector via the CLI, you need to copy the upgrade image to the collectors and then copy phcollectorimageinstaller.py to the collector there may be one on the collector in the directory indicated. and it may be the same I believe the rule of thumb is to use the Supervisor version

But first get the .zip file onto the collector.

copy the file to /opt/upgrade
#chmod 664 /opt/upgrade/FSM_Upgrade_All_7.1.3_build0165.zip

run the bellow command

#screen -S upgrade

then run

#/usr/bin/python /opt/phoenix/phscripts/bin/phcollectorimageinstaller.py FortiSIEM |tee -a /opt/phoenix/log/collector-upgrade.log