Adding an appliance to an active stack

You can expand the capacity of a stack by adding appliances while the stack is actively capturing data.

Procedure

  1. Install a QRadar® Network Packet Capture appliance with the same version of software as the appliances in the stack that you want to expand.
  2. Complete the physical installation of the appliance.

    This process includes attaching the appliance to the common management network, breaking up the stack ring, and cabling the new appliance into the ring. You can put the new appliance in any physical location in the stack. For more information, see Creating a stack.

    Note: During this process, connectivity in the stack ring is incomplete, and the operational status of the STACKING widget might show temporary cabling errors.
  3. Include the new appliance in the group, and add it to the stack as described in Add a Stack Node (Step 3).
  4. Check the STACKING widget to view the status of the new appliance.

    The appliance is fully operational when the Operational Status shows OK, the First packet and Last packet settings show N/A, and no cabling errors remain.

    When the appliance that is capturing data is full, the stack switches to the newly inserted appliance for data capture.