IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  In a HA setup how is the external mount storage is managed ?

    Posted Tue April 16, 2019 08:12 AM
    ​We have event processors in HA mode. We have mounted an external storage onto the primary server by adding the entry under /etc/fstab.  The storage is accessible from primary.

    But when a fail over happened and the secondary server is active, the storage partition is not visible under secondary server. Any idea what could be the possible reason ? Do we need to add the entries under /etc/fstab on secondary server well ? How does QRadar manage this external mount storage in its HA setup. Please suggest.

    ------------------------------
    Thanks and Regards
    David Joshua Edithi
    ------------------------------


  • 2.  RE: In a HA setup how is the external mount storage is managed ?

    Posted Tue April 16, 2019 09:12 AM
    ​The issue here we are seeing is that after adding the /etc/fstab entry in secondary appliance. Now the server doesnot respond to df -h. Can perform cd to directories by unable to list (ls) anything from /store directory.

    ------------------------------
    Thanks and Regards
    David Joshua Edithi
    ------------------------------



  • 3.  RE: In a HA setup how is the external mount storage is managed ?

    Posted Wed April 17, 2019 12:57 PM
    Hi David,

    can you please provide, which kind of Storage you added (FC, iSCSI, ...) ?
    Also it would be good if you can provide the entry of the /etc/fstab on both HA nodes. I do guess that the storage is not allowed to be mounted rw on both sides at the same time.

    ------------------------------
    Oliver Braun
    ------------------------------