Moving the /store file system to a multipath Fibre Channel solution

In IBM® QRadar®, you can implement multipath Fibre Channel. If you experience a storage area network or SAN switch issue, multipath provides extra redundancy to prevent disruption to flow and event data.

Before you begin

Ensure that you completed the following tasks:

Procedure

Log in to your QRadar Console as the root user, using SSH.
Identify a storage area network (SAN) partition by typing the following command:
```
blkid -o list
```

Stop the QRadar services by typing the following commands in the order specified:

systemctl stop systemStabMon
systemctl stop hostcontext
systemctl stop ecs-ec-ingress
systemctl stop tomcat
systemctl stop imq
systemctl stop hostservices
systemctl stop crond

Unmount the file systems by typing the following commands:
```
umount /store
```
Create a /store_old directory by typing the following command:
```
mkdir /store_old
```
Determine the Universally Unique Identifier (UUID) of the device partition by typing the following command:
```
blkid /dev/<partition>
```
Edit the /etc/fstab file.
1. Replace the /store mount point with /store_old.
2. Add the new /store mount point.
  If the file system is XFS and you are not using HA, add the following text:
```
UUID=<uuid> /store xfs inode64,logbsize=256k,noatime,nobarrier 0 0
```
  If the file system is XFS and you are using HA, add the following text:
```
UUID=<uuid> /store xfs inode64,logbsize=256k,noatime,noauto,nobarrier 0 0
```
  If the file system is ext4 and you are not using HA, add the following text:
```
UUID=<uuid> /store ext4 noatime,nobarrier 0 0
```
  If the file system is ext4 and you are using HA, add the following text:
```
UUID=<uuid> /store ext4 noatime,noauto,nobarrier 0 0
```
Mount the file systems and copy the data to your device by typing the following commands:
```
mount /store
mount /store_old
cp -af /store_old/* /store
umount /store_old
```

Start the QRadar services by typing the following commands in the order specified:

systemctl start crond
systemctl start hostservices
systemctl start imq
systemctl start tomcat
systemctl start ecs-ec-ingress
systemctl start hostcontext
systemctl start systemStabMon

Enable Fibre Channel multipath by typing the following command:
```
mpathconf --enable
```

Rename the local copy of /store by typing the following command:

lvchange -an /dev/storerhel/store 2>/dev/null
lvrename /dev/storerhel/store /dev/storerhel/storeold 2>/dev/null

Edit the /etc/fstab file to remove the /store_old mount point entry.