IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Error adding HA on QRadar 7.4

    Posted Thu December 23, 2021 09:36 AM
    while setting up a distributed deployment with HA, I got the following error while adding HA device for the console.

    "There was an error adding the HA host. Please see the error log for more details.

    Shared storage was not detected and disk replication was disabled. Console HA must be configured to use either disk replication or shared storage."

    after researching I am still unable to find what specifically they are calling shared storage- my question is ?

    is this new in 7.4 ?
    what is the shared storage piece means ? on the hypervisor they do use the same VMFS volume.

    Thanks

    ------------------------------
    Ditmar Tavares
    ------------------------------


  • 2.  RE: Error adding HA on QRadar 7.4

    Posted Fri December 24, 2021 07:47 AM
    Ditmar, are you using a shared storage or DRBD (background data replication) option in order to establish HA? The message suggests the latter was not configured and that probably the communication to the external storage was not possible from the node. In the shared storage option, the primary node in HA should have /store  moved to the external storage device, and the secondary configured to communicate with this external storage device. Since you are mentioning VMFS, I assume you have 2 VMs that you want to put in a single HA pair. In such a case, I would personally generally recommend DRBD option - but I do not know all the background details... Using ext. storage is an option, and that I guess requires checking RHEL compatibility / best practices as well. Using RDM or iSCSI to present ext. storage to VMs should work fine, and I guess VVOL should work too; I think RedHat mentioned in some knowledge base that VMDK could be an option with the multi-writer flag enabled. To be on a safe side (if not already done) checking with IBM support (i.e. raising a priority 4 case) would probably be a "best bet" ensuring what is supported.

    ------------------------------
    Dusan VIDOVIC
    ------------------------------

    Original Message


  • 3.  RE: Error adding HA on QRadar 7.4

    Posted Sat January 01, 2022 01:54 AM
    Dusan, thank you for taking the time to answer, you comment was very helpful in undertanding the topic. in this case it seems like the issue was space available on the nodes. 
    I added more space using LVM and the error went away.

    Thank you so much.
    DT

    ------------------------------
    Ditmar Tavares
    ------------------------------

    Original Message


Related Content