Upgrade from 4.1 to 5.0 after S149

[DSmirnov]

Sorry if I missed it in Release notes but I can't find a way to migrate from 4.1.4-S151 to 5.0

Upgrade process fails with errors about unknown signatures (added after S149):

Error converting config. Install aborted.

Error: Exception Error: -Commit current config-: Validate error for the component "signatureDefinition" and the instance "sig0"

/signatures/[sig-id=5464,subsig-id=0]/engine/ -- the union does not have a member selected

/signatures/[sig-id=5464,subsig-id=1]/engine/ -- the union does not have a member selected

[micballa]

Can you provide the uprade process you went through? What was the release you started at, which updates did you installed, and in what order. You should be able to upgrade a 4.1.4-S151 sensor to 5.0.

Thanks,

Jason

[DSmirnov]

Hmm,

sensor 4235, installed with 4.1.x, updated to 4.1.4-S91.

Later updated to 4.1.4f, plus from -S140 to 4.1.4-S149 to 4.1.4-S150 to 4.1.4-S151.

Now I'm trying to update from 4.1.4-S151 to 5.0.1-S149.

[kpruett]

I had the EXACT same problem. I was only at S150 at the time. Performing the downgrade option at the CLI got me back to S149 which then allowed me to upgrade to 5.0.

I also noticed a problem with user defined variables that popped up error messages so I removed those and the associated event filters prior to the upgrade.

Small bit of advice once your upgrade starts, give it plenty of time to finish. I recommend going to lunch or taking a break. It's not going to be a quick process.

-skpruett

[micballa]

I followed the upgrade path you took, and the test sensor upgraded correctly. Could you provide the virtualSensor.xml file from you 4.1.x sensor that is not upgrading? You can email it to micballa@cisco.com.

Thanks,

Jason

[DSmirnov]

Thank you, Jason,

I downgraded to 4.1.4 S150, upgraded back to 4.1.4- SS151, confirmed the presense of tar file in /usr/cids/idsRoot/var/updates/50sig/ and updated to 5.x-S149 w/o problems.