IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Increase store partition

    Posted 06/25/20 08:10 PM
    Hello all. 

    Currently I have space issues on one of my processors. I know that with lvm I can attach another disk on my virtual deployment, add it to lvm and using xfs_growsfs increase the /store size. Do you recommend that? Do you have any experience running this procedure?

    I appreciate any hint you can give me


    Regards, 


    Andrés

    ------------------------------
    Andres Arguelles
    ------------------------------


  • 2.  RE: Increase store partition

    Posted 06/26/20 05:16 AM
    Yes, LVM is there since QRadar 7.3.0+. If you have a high-availability setup, I think it is not supported. In other cases (if I am not mistaken) I think it was (at least) discouraged. If possible, I would always prefer adding new disk space to the machine and moving the /store or /store/ariel there (and discarding the old one later). Offboard Storage Guide should contain all the steps you need. If you are forced towards FS expansion, I would suggest (in order to be on the safe side) opening a case with severity 4 and getting official response from IBM support.

    ------------------------------
    Dusan VIDOVIC
    ------------------------------



Related Content