IBM Support

QRadar: HDD Common Statuses

General Page

The QRadar HDD’s can have different statuses indicating the stage of a specific drive. The statuses can vary depending on the installed hardware, RAID configuration, and the tools used to monitor them. Here are some common statuses that you might experience in QRadar:
  • Online - This status indicates that the HDD is functioning normally and is accessible by the system. The HDD is operational and actively storing or retrieving data.
  • Unconfigured – (good) – This status indicates that the HDD is present in the system but is not incorporated into any RAID configuration or storage pool. The HDD is not being actively used for data storage.
  • Degraded  - This status usually suggests that the HDD or the RAID array is experiencing some issues or errors. It typically means that the HDD is still functioning but might be operating at reduced performance or reliability.  In a RAID configuration, this status might indicate the failure of one disk in the array, but the array is still operational.
  • Failed -  This status indicates that the HDD encountered a critical error or stopped working. A failed HDD needs to be replaced to restore normal system operation. In a RAID configuration, this status might indicate that the array is no longer functioning correctly due to the failure of one or more disks.
  • Predictive Failure - The on-board system tools detected that a disk is approaching failure or end of life. The slot or bay location of the failure is identified.  This drive must be manually taken offline or changed to a failed status before replacing it with a new HDD.  

    To resolve a Predictive Failure, refer to https://www.ibm.com/support/pages/qradar-troubleshooting-disk-failure-or-predictive-disk-failure-notifications
  • Rebuilding - If you have a RAID configuration and a failed HDD is replaced with a new one, the status might show as "rebuilding." A rebuilding status means that the data from the remaining disks in the RAID array is being copied to the newly added disk to restore redundancy and fault tolerance. When the rebuilding process completes, the status usually returns to "online."

    If it does not appear to be rebuilding, refer to this article for troubleshooting steps:
    QRadar: Disk drive is in "Unconfigured (good)" state after replacement and is not being rebuilt automatically

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSV4BL","label":"IBM QRadar"},"ARM Category":[{"code":"a8m0z000000cwtcAAA","label":"Hardware"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
28 August 2023

UID

ibm17014163