Question & Answer
Question
Does QRadar® support LVM file system storage expansion?
Answer
Currently, expanding LVM in QRadar is an untested process and not supported. LVM expansion can cause data loss, system failures, or put a system into an unrecoverable state, which could require the rebuilding of your deployment.
Supported methods for increasing QRadar storage:
- When you create the file system storage during the QRadar® Software installation as outlined in the IBM QRadar Version 7.5 Installation Guide.
- Adding a Data Node appliance, see the What is a QRadar Data Node Appliance?
- Adding external storage, see the IBM QRadar Offboard Storage Guide.
- If the host is a stand-alone VM, you can create a new VM with increased single disk space, install QRadar®, and migrate the old host to the new host. See the QRadar hardware migration process.
Related Information
[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Version(s)"}]
Was this topic helpful?
Document Information
Modified date:
18 May 2023
UID
ibm16352943