FortiAnalyzer 7.6.1 version is updated and the database rebuild is not progressing.

[Lucas1]

I am having problems when upgrading to the new version of FortiAnalyzer. The database recontruction gets stuck and does not progress. It has been taking the same time for days. This does not allow me to review and collect logs.

[adambomb1219]

Open a TAC case.

[dingjerry_FTNT]

Hi @Lucas1 ,

Try to cancel it and rebuild it.

[RW2]

Did you find an answer, I have the same problem, it appears to be with "siemdb"

[Lucas1]

No. Unfortunately I couldn't figure out the database rebuild. What I did to solve it is to restore the VM snapshot and try again to upgrade to a stable version.

[mrafat · Accepted solution]

Hi,
This is mostly related to the SIEM DB , please check out the workaround below and if the issue didn't get resolved, open a TAC ticket to be provided with a special build that has a fix for this issue
https://docs.fortinet.com/document/fortianalyzer/7.6.1/release-notes/901026/special-notices

[RW2]

The workaround didn't change anything so we we rolled by to a previous backup.  This is a major issue because you do not immediately realise the issue..  It took us a few days to notice when we started to realise the it was not creating scheduled reports.

This is going to create a lot of pain for some people.