Upgrade FortiAnalyzer-BigData

Before you upgrade FortiAnalyzer-BigData, ensure you have an FTP server that the FortiAnalyzer-BigData Security Event Manager Controller can access. Then put the FortiAnalyzer-BigData image on the FTP server.

Upgrade takes about 45 minutes. The upgrade starts with the FortiAnalyzer-BigData main host and then the Security Event Manager hosts. During the upgrade, the GUI is not available. Log collecting, LogView, and FortiView operations are also not available.

It is recommended to perform the upgrade via the GUI. The upgrade process via the CLI may fail if the SSH connection is disrupted before the Controller hosts reboot during the early upgrade stage.

To upgrade FortiAnalyzer-BigData with the GUI:

1. In the bottom-left of the Navigation bar, click the gear icon .

   

2. Click Upgrade to access the Upgrade System dialog box.

   

3. Enter the FTP server's IP address, username, password, and file path.
4. Click Upgrade.

   The system begins to prepare for the upgrade.

   

   After the system finishes preparing, it loads a new page where you can see the current status and check the upgrade progress.

   

   

   The upgrade takes about 45 minutes. If the upgrade is successful, you see the following message.

   

5. Click here to return to the FortiAnalyzer-BigData portal.

   If the upgrade fails, you see the following message:

   

   To troubleshoot the problem, see What to do if an upgrade fails.

To upgrade FortiAnalyzer-BigData with the CLI:

You can also upgrade your FortiAnalyzer-BigData using the fazbdctl CLI command on the Security Event Manager Controller.

1. Access the Security Event Manager Controller CLI by establishing an SSH connection to the Cluster Management IP. See To connect to the Security Event Manager Controller:.

   Starting the upgrade process from the Main Host instead of the Security Event Manager Controller may result in upgrade failure. If this failure occurs, you must start again with a forced upgrade from the Security Event Manager Controller via SSH connection. Use the -f option to perform the forced upgrade. There is no forced upgrade option via the GUI.

2. Run the following command:

   fazbdctl upgrade fazbd -U <ftp_path> -u <user> -p <password>

   Or, interactively,

   fazbdctl upgrade fazbd

3. Follow the onscreen instructions to enter your FTP server URL, upgrade file's zip file path, and FTP username and password.

   The system upgrades the FortiAnalyzer-BigData Main Host and then the Security Event Manager. After a few minutes, the Security Event Manager Controller reboots.

4. After the Security Event Manager Controller reboots, reconnect to it and monitor the broadcast messages for progress.
5. Wait about 45 minutes for the following message to display on the terminal.

   [100%] Finished setting up Core Services.

   Downgrading to prior versions of FortiAnalyzer-BigData is not supported.