| Description |
This article provides a detailed step-by-step guide to troubleshoot upgrade failures in FortiSIEM, particularly those involving ClickHouse tables, where the following error is encountered:
setup-clickhouse : CLICKHOUSE | Upgrade to new schema version script ...| localhost | FAILED | |
| Scope | FortiSIEM v7.x+. |
| Solution |
Important: Before proceeding, take a snapshot of the VM for recovery purposes.
The following message typically occurs due to a misconfiguration in the storage_policy.xml file or incorrect settings in the summary.sql table:
Code: 36. DB::Exception: Received from localhost:9000. DB::Exception: New storage policy `default` shall contain volumes of old one. (BAD_ARGUMENTS)
Follow the steps below to resolve the issue:
cat /etc/clickhouse-server/config.d/storage_policy.xml
cd /data-clickhouse-hot-1/clickhouse/store/ find . -name summary.sql
Observe the output of the 'find' command and navigate to the directory to inspect both summary.sql and events_replicated.sql:
cd <directory_path>/ cat summary.sql cat events_replicated.sql
Expected Configuration: For FortiSIEM v7.x+, the table ENGINE should be ReplicatedMergeTree. The storage_policy should be one of fsiem_storage_policy, moving_from_hot_to_warm, or triple_tier.
cd /opt/phoenix/deployment/clickhouse_upgrade/ ./clickhouse_db_up_6.6.0_to_6.7.0.sh
Note: This process will involve downtime ranging from 15 minutes to 1 hour, depending on storage size.
Example Output:
[root@Supervisor clickhouse_upgrade]# ./clickhouse_db_up_6.6.0_to_6.7.0.sh Creating fsiem.summary_replicated with storage policy moving_from_hot_to_warm fsiem.summary table exists..
cd /data-clickhouse-hot-1/clickhouse/store/<directory_path>/summary.sql cd /data-clickhouse-hot-1/clickhouse/store/<directory_path>/events_replicated.sql clickhouse-client -q "SHOW CREATE TABLE fsiem.summary FORMAT Vertical" clickhouse-client -q "SHOW CREATE TABLE fsiem.events_replicated FORMAT Vertical"
Ensure the ENGINE is set to ReplicatedMergeTree and the storage_policy matches the configuration in /etc/clickhouse-server/config.d/storage_policy.xml. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.