Tiered storage deployment configuration examples

Tiered Storage requires a data cluster that consists of at least one processor and at least one data node. In this minimal configuration, the processor becomes the hot storage tier and the data node becomes the warm storage tier. Data migrates from the former to the latter. Additional hosts can be added to both tiers as needed.

Example 1

Consider the following QRadar deployment, consisting of a console, event processor, and data node. The Tiered storage is enabled on the event processor data cluster, with the event processor as the single member of the hot storage tier and the data node as the single member of the warm storage tier. This configuration represents the minimal tiered storage deployment.

Figure 1. Minimal Tiered Storage deployment configuration
Minimal Tiered Storage deployment configuration

Example 2

Consider the following QRadar deployment, consisting of a console, event processor, and two data nodes. The Tiered storage is enabled on the event processor data cluster, with the event processor and one data node as the two members of the hot storage tier and the second data node as the single member of the warm storage tier. In this configuration, data migrates from the two hosts of the hot tier to the single host of the warm tier.

Figure 2. Multi host Tiered Storage tier configuration, different tier host count
Multi host Tiered Storage tier configuration, different tier host count