FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
kdave
Staff
Staff
Article Id 384160
Description This article describes how to resolve the Collector installation error 'Not Able to resolve the test host provided'.
Scope FortiSIEM.
Solution

While installing a Collector, it has been often observed that collector shows No Connection even after collector registration is successful. This error leads to analysis of collector installation logs in /usr/local/fresh-install/logs/ansible.log. The following errors have been observed in logs.

 

[07:27:27] fsm-network : NETWORK | Set DNS ...| localhost | FAILED | 33.56s
{
 - msg: One or more items failed
 - results: [ {
 - msg: {
[07:27:27] fsm-network : NETWORK | Set DNS ...| - set_dns_Status: FAILED
 - set_dns_RetCode: Not Able to resolve the test host provided
 }
 - failed: True
 - changed: False
 - item: 
 - 10.150.120.71
 - 10.150.120.72
 - google.com
 - collector
 - /usr/local//fresh-install
 ******************** FSM TASK RESULT ********************************************

Fsm Tasks Summary On localhost : success=29 changed=24 unreachable=0 failed=1

 

  • To resolve the error above, run configFSM.sh again and select the option 'change_network_config'.
 

change_network_config.jpg

 

  • IP Address configuration can be left unchanged if there are no corrections to be made.
  • Under the Enter host for checking network connectivity section, enter a test ping host 127.0.0.1 instead of google.com. 

 

Screenshot_2.jpg

 

  • Select Next to apply the changes and select Run to finish collector installation. This would complete collector installation.
  • The collector will be rebooted. Run the following command to register the collector.

 

/opt/phoenix/bin/phProvisionCollector --add <user> '<password>' <Super IP or Host> <Organization> <CollectorName>

 

Related document:

ESX installation guide - FortiSIEM.

Contributors