Description | This article describes the troubleshooting steps to resolve a phQueryMaster process down issue in v7.3x+, where the logs indicate a failure to retrieve the jsonConfig from Redis during a ClickHouse. |
Scope | FortiSIEM v7.3x and later, with ClickHouse database. |
Solution |
When phQueryMaster fails to initialize, the following errors in /opt/phoenix/log/phoenix.log may be encountered even after attempting to restart the process with phtools --start phQueryMaster:
Follow the steps below to resolve the issue:
Verify Redis keys: On the Supervisor CLI, connect to Redis and check if the following keys return (nil) values:
redis-cli -p 6666 -a `phLicenseTool --showRedisPassword`
If these keys are missing (showing as (nil)), proceed with the service restarts below.
Restart Redis service:
/opt/phoenix/redis/bin/redis_ops.sh stop
Restart phClickHouseMonitor service:
systemctl stop phClickHouseMonitor
Test and deploy ClickHouse settings from the GUI:
Restart the phQueryMaster process:
After completing these steps, the phQueryMaster process should remain up and running. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.