IBM Support

QRadar: Converting RAID 0 to RAID 5 for QRadar Packet Capture on an IBM x3650 M4 appliance

Question & Answer


How do I convert QRadar Packet Capture on an IBM x3650 M4 appliance from RAID 0 to RAID 5 for V7.2.4 and earler releases?


If your storage needs change, or you want to add redundancy and further protect your data, you can convert the RAID level of your logical drives from RAID 0 to RAID 5.

Delete the QRadar® Packet Capture RAID 0 Virtual Drive:

    1. Enter the System BIOS at POST (F1).
    2. From System Settings menu, select Storage.
    3. Select LSI MegaRAID ConfigurationUtility.
    4. From the Main Menu, select Virtual Drive Management.
    5. Select Virtual Drive 2, RAID0, 40978GB, Optimal.
    6. From the Select Operation option, select Delete Virtual Drive and then select Go.
    7. Select Confirm, and select yes to confirm deleting the virtual drive.
    8. Select OK when prompted that the operation finished successfully.

Create a RAID 5 Virtual Drive:
    1. Select RAID Level <RAID5>.
    2. Clear the Secure Virtual Disk option.
    3. Clear the Use Data Protection option.
    4. Select Physical Disks From <Unconfigured Capacity>.
    5. Under the Select Physical Disks menu, select Media Type <HDD>.
    6. Select Interface Type <SAS>.
    7. Confirm Logical Sector <512 B>
    8. Choose Unconfigured Physical Disks.
    9. Click Check All to select every remaining drive (11 drives).
    10. Click Apply Changes.
    11. Click OK when prompted that the operation finished successfully.

Configure the Virtual Disk Parameters:
    1. Set the virtual disk parameters to match the following:
    2. ParameterSetting
      Virtual Drive NameUse the default setting.
      Virtual Drive Size[37252]
      Virtual Drive Size Unit GB
      Strip Element Size1 MB
      Read PolicyRead Ahead
      Write PolicyForce Write Back
      I/O PolicyDirect
      Access PolicyRead/Write
      Drive CacheEnable
      Disable Background InitializationNo
      Default Initialization Fast
    3. Click Save Configuration.
    4. Click Confirm, and click Yes to confirm that you want to delete the virtual drive.
    5. Click OK.

      Where do you find more information?

[{"Product":{"code":"SSMU35","label":"IBM QRadar Network Packet Capture Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"--","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.2.2","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
28 October 2020