Hello everyone,

We currently have one All-in-one console HA cluster with members:

- Primary server – gen.1 appliance;

- Secondary server – gen. 2 appliance.

New server (gen. 3 appliance) should become the primary server in this cluster.

To minimize downtime, our plan is to:

1. Get all the servers to same version.
2. Break the HA cluster;
3. Migrate configuration from current Primary server (Gen.1) to the newest hardware appliance (Gen.3)
4. Create HA cluster again with the newest appliance as primary and Secondary server.

Here are some concerns:

The data should replicate from the secondary server to the primary, after step 4?

New primary server, as gen.3 appliance has better disk resources then the secondary server which is Gen.2. So it might not be possible to create the cluster again using these two appliances or should find a way to reduce the usable disk storage/capacity for the new Primary server..

Hi Ilia

The current supported Hardware migration scenarios are listed at the following link

https://www.ibm.com/docs/en/qsip/7.5?topic=hardware-qradar-siem-migration-scenarios

As the "new primary" will have larger disks it will not be possible to pair it in HA with the existing secondary.  Also the use of LVM to re-size disks (increase or decrease) in Qradar is not supported.

https://www.ibm.com/support/pages/does-qradar-support-lvm-file-system-storage-expansion

Thanks