IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

SIEM Qradar Server Deployment Query Re Second Disk Volume

  • 1.  SIEM Qradar Server Deployment Query Re Second Disk Volume

    Posted Thu October 26, 2023 12:55 PM

    Dear QRadar Community Support Group, 

    The QRadar SIEM server deployment instructions include the following step for adding a second disk volume that will eventually contain the '/store' & '/transient' partitions:  

    Navigate to the Configure Storage section

    Click Add new volume.

    For information about available disk options, see AWS Volume Types.
    Estimate your storage needs and then enter a size in GiB.
    The minimum size is 250 GiB. 
    The added disk must be the second disk. It cannot be the third or greater disk. 
    When the installation is complete, this disk contains the /store and /transient partitions.

    Can any of you provide a little further guidance on this second volume?

    In particular, Id like to know:

    1. Does it need to be a separate second disk volume or can I simply make the root disk volume larger?
    2. If a second disk volume is specifically needed, do I need to do anything with the second volume before it can be used during the following installation procedure:  
       sudo /root/setup <appliance_id>

    3. Do I need to pvcreate the disk before the installation procedure or add it to a volume group?

    Thank you.

    Cossy



    ------------------------------
    Cossy Cosmas
    ------------------------------


Related Content