FortiSOAR Knowledge Base
FortiSOAR: Security Orchestration and Response software provides innovative case management, automation, and orchestration. It pulls together all of an organization's tools, helps unify operations, and reduce alert fatigue, context switching, and the mean time to respond to incidents.
nmathur
Staff
Staff
Article Id 247270
Description

This article describes that ElasticSearch service does not come up after upgrading to FortiSOAR 7.3.1, and the ElasticSearch logs contain the following error:

'cannot upgrade node because incompatible indices created with version'.

Scope FortiSOAR 7.3.1.
Solution

To resolve this issue, do the following:

1) SSH to the FortiSOAR VM and log in as a root user.

2) Stop the Elasticsearch service using the following command:

 

 systemctl stop elasticsearch

 

3) Delete the 'nodes' and 'indices' folders from the:

 /var/lib/elasticsearch folder.

 

4) Start the Elasticsearch service using the following command: 

 

systemctl start elasticsearch

 

5) Re-run indexing using the following command: 

 

sudo -u nginx php /opt/cyops-api/bin/console app:elastic:create


Note: It is recommended to reindex FortiSOAR during non-working hours. 

 

Contributors