FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
lucianag22
Staff
Staff
Article Id 372991
Description

This article describes how to solve the error 'Running upgrade.sh Failed 13' when trying to upgrade collector via Image Server on the GUI.

Using FortiSIEM GUI, after uploading the image on the Image Server page and downloading it to the Collector on the Collector Health page, the next step is to select the Install Image action. Although the task appears to start and complete successfully, it actually fails. The Collector reboots but continues running the original version.

 ColectorKB4.PNG

 

The following error is seen by the CLI on the collector console.

 

[root@collector721 ~]# cat /opt/phoenix/log/collector-upgrade.log

Running upgrade.sh Failed  13

Scope FortiSIEM Collector
Solution
  1. Check if the collector can access the following URLs with curl commands:

 

curl -vk https://os-pkgs-cdn.fortisiem.fortinet.com

curl -vk https://os-pkgs-r8.fortisiem.fortinet.com

 

Example:

 

[root@collector721 ~]# curl -vk https://os-pkgs-cdn.fortisiem.fortinet.com

* Rebuilt URL to: https://os-pkgs-cdn.fortisiem.fortinet.com/

*   Trying 143.204.23.111...

* TCP_NODELAY set

 

If the error above occurs, it indicates that the Collector cannot access the specified URLs.

 

  1. Create a rule firewall to allow the Collector can access and make sure SSL inspection is disabled.

 

ColectorKB7.PNG

 

  1. After that check the curl to the URLs again and then start the Install Image task by the GUI, this time the task will be finished properly. Check version in the Collector health page or by CLI in the collector using the command phshowVersion.sh.

 

ColectorKB8.PNG

 

Related document:

Technical Tip: How to upgrade online collector with first verification steps 

Contributors