|
When the FortiSIEM is not providing access to the GUI and/or ph services are down after a rough power outage or an upgrade, clearing the application server cache can be useful to start the application server.
Here are the steps to follow:
From the super CLI as root:
su admin
phtools --stop ALL
monctl stop
cd /opt/phoenix/cache/
mv ip_dir ipdir_.old # replace the ip_dir by the IP of the super
cd /opt/glassfish/domains/domain1/
rm -rf generated/
rm -rf osgi-cache/
kill -9 $(cat /opt/glassfish/domains/domain1/config/pid)
monctl start
while true; do phLicenseTool --showDatabasePassword; sleep 5; done
Wait for the database password to be displayed. This can take a while along with the resources and the size of the CMDB (around 15 minutes).
Once the password is displayed press 'ctrl+c' to stop, which means that the application server is running and GUI can be accessed.
Check for other services to come up with :
phstatus
Health can also be checked in the GUI at Admin -> Health -> Cloud Health. Status should become 'normal' after a while.
If the application service does not remain accessible, further analysis is required by the support team by sending a log as described in the following article: Technical Tip: How to retrieve logs from FortiSIEM VA and deliver them to support.
|
