IBM QRadar

Hi guys,

In our current structure, we have a /store/backup disk that we use as backup and there are EPs in the HA structure. We want to move it to a different path, so we deleted the /etc/fstab mount line on the HA EP by umounting, but after these operations "]The storage partition(s) /store/backup on ep_hostname (1.1.1.1.1) are not currently accessible.  Manual intervention may be required to restore normal operation." When you check again, the b/backup path is automatically re-added. What exactly can we do?

thanks

Adem, there are different aspects that need to be considered here. 1st of all you can use your own (SAN/NAS) disks for /store/backup. 2nd you need to specify it in the admin section for backup and recovery, If not the default path will be used during nightly backup. Its always dangerous to manipilate Qradar on the CLI without updating the correspondent info in database and config files. Pls refer to Chapter 11. Backup and recovery in the admin guide.

Hi guys,

In our current structure, we have a /store/backup disk that we use as backup and there are EPs in the HA structure. We want to move it to a different path, so we deleted the /etc/fstab mount line on the HA EP by umounting, but after these operations "]The storage partition(s) /store/backup on ep_hostname (1.1.1.1.1) are not currently accessible.  Manual intervention may be required to restore normal operation." When you check again, the b/backup path is automatically re-added. What exactly can we do?

thanks