Question & Answer
Question
Does QRadar® support LVM file system storage expansion?
Answer
Currently, expanding LVM in QRadar is an untested process and not supported. LVM expansion can cause data loss, system failures, or put a system into an unrecoverable state, which could require the rebuilding of your deployment. This including the QRadar® HA environment.
Supported methods for increasing QRadar storage:
- When creating the file system storage during the QRadar® Software installation stage, as detailed in the IBM QRadarVersion 7.4.1 Installation Guide . This includes the QRadar® Installation stage of AWS and Azure (cloud) images.
- Adding a data node, see the What is a QRadar Data Node Appliance? and IBM QRadarVersion 7.4.1 Installation Guide
- Adding external storage, see the IBM QRadarVersion 7.4.1 Offboard Storage Guide
- If the host is a stand-alone VM, you can create a new VM with increased single disk space, install QRadar®, and migrate the old host to the new host. See the QRadar hardware migration process
Related Information
[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Version(s)"}]
Was this topic helpful?
Document Information
Modified date:
05 November 2020
UID
ibm16352943