The article provides a step-by-step solution to resolve the issue where the collector IP is no longer visible under the Supervisor GUI health section after upgrading collectors to v7.4.1 or 7.4.2.
Scope
FortiSIEM v7.4.1 and v7.4.2.
Solution
Follow these steps to resolve the issue where the collector IP is no longer visible under the collector health GUI page after upgrading collectors to v7.4.X:
Take a backup of the file /opt/phoenix/config/phoenix_config.txt on Collector node
cp -a /opt/phoenix/config/phoenix_config.txt /opt/phoenix/config/phoenix_config.txt_bak
Modify the file and add the IP in the value of the parameter FSIEM_IP= using the command (replace Collector_IP with the collector IP before running the command).
sed -i 's/^FSIEM_IP=$/FSIEM_IP=Collector_IP/' /opt/phoenix/config/phoenix_config.txt
Restart phMonitor on the collector using the command.
killall -9 phMonitor
Verify the phMonitor process is up.
phstatus
Verify IP visible for the collector in ADMIN -> Health -> Collector Health.
