FortiSIEM JSON Error

[ebudi]

Has anyone experienced this error before, it just popped up this morning and my analysts cant get past it. The SIEM is now inaccessible. 

We recently upgraded to version 7.3

[premchanderr]

Hi Eugene ,

Issue is specific to your environment , suggest you to open a ticket with Fortinet support.

The problem could be due to large or incorrect query/api call done to FortiSIEM that caused excessive errors in backed,

[ebudi]

I've raised a ticket with support. They are slow to respond and the error keeps popping up so my analysts can't even use the SIEM

[StoyanIliev]

Hi, 

We have the same problem on the same version. Do you get some response from the response, because we still are waiting.

Thanks

[ebudi]

I created a ticket for this, they are still reviewing the logs I uploaded.

I did a stop then start for all services and it hasn't popped up since

Use the below guide 

https://community.fortinet.com/t5/FortiSIEM/Technical-Tip-How-to-restart-all-processes-in-FortiSIEM-...

[FSM_FTNT]

@StoyanIliev @ebudi thanks for raising this and it is being looked into.  @StoyanIliev did you also have a support ticket?