Patch Installation Instructions

Before you begin, ensure that you take the following precautions:

  • Back up your data before you begin any software upgrade. For more information about backup and recovery, see the Extreme Networks SIEM Administration Guide.
  • To avoid access errors in your log file, close all open SIEM sessions.
  • The fix pack for cannot install on a managed host that is at a different software version from the Console. All appliances in the deployment must be at the same software revision to patch the entire deployment.
  • Verify that all changes are deployed on your appliances.
  • The patch cannot install on appliances that have changes that are not deployed.

Fix packs are cumulative software updates to fix known software issues in your SIEM deployment. SIEM fix packs are installed by using an SFS file. The fix pack can update any appliance attached to the SIEM Console that is at the same software version as the Console.

You must wait for the Console to upgrade, reboot, and complete starting up prior to upgrading your other SIEM systems. If not, you may receive a connection refused error when upgrading the other systems, as they attempt to contact the Console prior to starting the upgrade. To check that your Console is online, try to log in to the web interface. Once you can login to the web interface, you can begin the upgrade of the other systems.

  1. Download the 724_patchupdate-7.2.4.<build_number>.sfs patch from the Software tab of the Extreme SIEM downloads page (https://extranet.extremenetworks.com/downloads/Pages/SIEM.aspx).
    Note

    Note

    You must have a user account to access this page.
  2. Using SSH, log in to your system as root.
  3. Copy the patch file to the /tmp directory on the SIEM Console.
    Note

    Note

    If space in /tmp is limited, copy the patch file to another location with sufficient space.
  4. Create the /media/updates directory:
    mkdir –p /media/updates
  5. Change to the directory where you copied the patch file: cd <directory>
    For example: cd /tmp
  6. Mount the patch file to the /media/updates directory:
    mount -o loop -t squashfs 725_patchupdate-7.2.5. <build_number>.sfs /media/updates/
  7. Run the patch installer:
    /media/updates/installer
    Note

    Note

    The first time you use the patch installer script, expect a delay before the first patch installer menu displays.
  8. Using the patch installer, select all.

    The all option updates the software on all systems in your deployment. In HA deployments, primary HA appliances are patched and replicate the patch update to the secondary HA appliance.

    If you do not select the all option, you copy the fix to each appliance in your deployment and install the fix pack. If you manually install fix packs in your deployment, you must update your appliances in the following order:
    • 1 Console
    • 2 Event Processors
    • 3 Event Collectors
    • 4 Flow Processors
    • 5 Flow Collectors

    If your Secure Shell (SSH) session is disconnected while the upgrade is in progress, the upgrade continues. When you reopen your SSH session and rerun the installer, the patch installation resumes.

  9. After the patch completes and you have exited the installer, type the following command:
    umount /media/updates
  10. Clear the browser cache before logging in to the Console.
A summary of the fix pack installation advises you of any managed host that were not updated. If the fix pack fails to update a managed host, you can copy the fix pack to the host and run the installation locally.