FortiSIEM Collector Upgrade Issue

[adem_netsys]

Hi Guys,

I am upgrading from 7.2.4 to 7.3.2. I upgraded Supervisor, but when I download image from collectors GUI, the process does not finish, the process continues. Manually I tried to do the upgrade file under /opt/upgrade, but towards the end I got an error like the following. Has anyone encountered this, what can I do? I have host registration and 443 permissions, I have previously upgraded collectors. The issue has some importance.

Operation upgrade Failed with the error above

/bin/cp: cannot stat ‘/opt/phoenix/config/sys/etc/mod_evthandler.so’: No such file or directory

[DHNX]

Hey @adem_netsys 

This typically indicates that the upgrade image is either incomplete, corrupted, or the upgrade script is referencing a file that does not exist in the expected location.

Recommended Steps:

SSH into the Collector and verify the upgrade image:

cd /opt/upgrade tar -tzf <upgrade-file>.tgz | grep mod_evthandler.so

If the file is missing or the archive is invalid, re-download the upgrade image from the Supervisor.

Ensure the Collector has access to the Image Server and sufficient disk space:

df -h
(Optional) As a temporary workaround, create a placeholder file to bypass the error:

mkdir -p /opt/phoenix/config/sys/etc/ touch /opt/phoenix/config/sys/etc/mod_evthandler.so
Retry the upgrade process manually.

Reference:
If the issue persists or you prefer to use the manual upgrade method, refer to Fortinet's official guide here:
Technical Tip: FortiSIEM Collector upgrade by using upgrade image manually

[adem_netsys]

@DHNX 

The problem was caused by a version bug. In such cases, it is necessary to manually throw the upgrade file file and install it.

[DHNX]

@adem_netsys 

In my case, I have the same issue that you faced, but I tried that method to fix it by upgrading the collector by manually.