Virtual Hosts Additional Storage

Document created by RSA Information Design and Development on Apr 10, 2019Last modified by RSA Information Design and Development on Feb 14, 2020
Version 20Show Document
  • View in full screen mode
 

This topic contains several sets of command-line instructions, designed to efficiently assign storage for various virtual hosts.

IMPORTANT: You should work with your SE to determine correct sizing for your storage specific storage requirements.

Use these links to go directly to the details for a specific component:

Archivers

## size each drive according to Scenario Planner VM details
## archiverdb is COMBINED metadb && rawdb from Scenario Planner
 
## in ESXi attach new drives in the following order (save settings after each addition)
 ##index (SSD)
 ##archiverdb
 
##CLI
 ls -la /dev/sd*
 ## if drives were attached as recommended above, /dev/sdb will be the index
 ## and /dev/sdc will be the archiverdb
 
 ## check existing physical volumes, volume groups, and logical volumes
 pvscan
 vgscan
 lvscan
 
 ## create new physical volumes
 pvcreate /dev/sdb
 pvcreate /dev/sdc
 
 ## create new volume groups
 vgcreate netwitness_vg01 /dev/sdb
 vgcreate netwitness_vg02 /dev/sdc
 
 ## create and size new logical volumes
 lvcreate -l 100%FREE netwitness_vg01 -n index
 lvcreate -l 100%FREE netwitness_vg02 -n archiverdb
 
 ## construct XFS file system from logical volumes
 mkfs.xfs /dev/netwitness_vg01/index
 mkfs.xfs /dev/netwitness_vg02/archiverdb
 
 ## confirm new volume groups and logical volumes, and that all free space has been used
 lvscan
 vgscan
 
 cd /var/netwitness/archiver
 mkdir index0
 mkdir database1
 
 vi /etc/fstab
 ## add the following lines
 /dev/mapper/netwitness_vg01-index /var/netwitness/archiver/index0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg02-archiverdb /var/netwitness/archiver/database1 xfs defaults,noatime 1 2
 ## save
 
 mount -a
 df -h
 
## add additional storage mount paths within UI
##restart service

Concentrators

## size each drive according to Scenario Planner VM details
## in ESXi attach new drives in the following order (save settings after each addition)
 ##index (SSD)
 ##metadb
 ##sessiondb
 
##CLI
 ls -la /dev/sd*
 ## if drives were attached as recommended above, /dev/sdb will be the index,
 ## /dev/sdc will be the metadb and /dev/sdd will be the sessiondb
 
 ## check existing physical volumes, volume groups, and logical volumes
 vgscan
 lvscan
 pvscan
 
 ## create new physical volumes
 pvcreate /dev/sdb
 pvcreate /dev/sdc
 pvcreate /dev/sdd
 
 ## create new volume groups
 vgcreate netwitness_vg01 /dev/sdb
 vgcreate netwitness_vg02 /dev/sdc
 vgcreate netwitness_vg03 /dev/sdd
 
 ## create and size new logical volumes
 lvcreate -l 100%FREE netwitness_vg01 -n index
 lvcreate -l 100%FREE netwitness_vg02 -n metadb
 lvcreate -l 100%FREE netwitness_vg03 -n sessiondb
 
 ## construct XFS file system from logical volumes
 mkfs.xfs /dev/netwitness_vg01/index
 mkfs.xfs /dev/netwitness_vg02/metadb
 mkfs.xfs /dev/netwitness_vg03/sessiondb
 
 lvscan
 vgscan
 
 cd /var/netwitness/concentrator
 mkdir index0
 mkdir metadb0
 mkdir sessiondb0
 
 vi /etc/fstab
 ## add the following lines
 /dev/mapper/netwitness_vg01-index /var/netwitness/concentrator/index0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg02-metadb /var/netwitness/concentrator/metadb0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg03-sessiondb /var/netwitness/concentrator/sessiondb0 xfs defaults,noatime 1 2
 ## save
 
 mount -a
 df -h
 
## add additional storage mount paths within UI
##restart service

Decoders (Packet and Log)

## size each drive according to Scenario Planner VM details
## in ESXi attach new drives in the following order (save settings after each addition)
 ##index (SSD)
 ##metadb
 ##sessiondb
 ##packetdb
 
##CLI
 ls -la /dev/sd*
 ## if drives were attached as recommended above, /dev/sdb will be the index,
 ## /dev/sdc will be the metadb, /dev/sdd will be the sessiondb,
 ## and /dev/sde will be the packetdb
 
 ## check existing physical volumes, volume groups, and logical volumes
 vgscan
 lvscan
 pvscan
 
 ## create new physical volumes
 pvcreate /dev/sdb
 pvcreate /dev/sdc
 pvcreate /dev/sdd
 pvcreate /dev/sde
 
 ## create new volume groups
 vgcreate netwitness_vg01 /dev/sdb
 vgcreate netwitness_vg02 /dev/sdc
 vgcreate netwitness_vg03 /dev/sdd
 vgcreate netwitness_vg04 /dev/sde
 
 ## create and size new logical volumes
 lvcreate -l 100%FREE netwitness_vg01 -n index
 lvcreate -l 100%FREE netwitness_vg02 -n metadb
 lvcreate -l 100%FREE netwitness_vg03 -n sessiondb
 lvcreate -l 100%FREE netwitness_vg04 -n packetdb
 
 ## construct XFS file system from logical volumes
 mkfs.xfs /dev/netwitness_vg01/index
 mkfs.xfs /dev/netwitness_vg02/metadb
 mkfs.xfs /dev/netwitness_vg03/sessiondb
 mkfs.xfs /dev/netwitness_vg04/packetdb
 
 lvscan
 vgscan
 
 cd /var/netwitness/decoder
     ## OR
 cd /var/netwitness/logdecoder
 mkdir index0
 mkdir metadb0
 mkdir sessiondb0
 mkdir packetdb0
 
 vi /etc/fstab
 ## add the following lines
 ## packet decoder
 /dev/mapper/netwitness_vg01-index /var/netwitness/decoder/index0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg02-metadb /var/netwitness/decoder/metadb0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg03-sessiondb /var/netwitness/decoder/sessiondb0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg04-packetdb /var/netwitness/decoder/packetdb0 xfs defaults,noatime 1 2
 ## log decoder
 /dev/mapper/netwitness_vg01-index /var/netwitness/logdecoder/index0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg02-metadb /var/netwitness/logdecoder/metadb0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg03-sessiondb /var/netwitness/logdecoder/sessiondb0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg04-packetdb /var/netwitness/logdecoder/packetdb0 xfs defaults,noatime 1 2
 ## save
 
 mount -a
 df -h
 
## add additional storage mount paths within UI
##restart service

Hybrids (Packet and Log)

## size each drive according to Scenario Planner VM details
## in ESXi attach new drives in the following order (save settings after each addition)
 ## concentrator:
 ##index (SSD)
 ##metadb
 ##sessiondb
 ## decoder:
 ##index (SSD)
 ##metadb
 ##sessiondb
 ##packetdb
 
##CLI
 ls -la /dev/sd*
 ## if drives were attached as recommended above, /dev/sdb will be the concentrator index,
 ## /dev/sdc will be the concentrator metadb, /dev/sdd will be the concentrator sessiondb ...
 ## ... /dev/sde will be the decoder index, /dev/sdf will be the decoder metadb,
 ## /dev/sdg will be the decoder sessiondb, and /dev/sdh will be the decoder packetdb
 
 ## check existing physical volumes, volume groups, and logical volumes
 pvscan
 vgscan
 lvscan
 
 ## create new physical volumes
 pvcreate /dev/sdb
 pvcreate /dev/sdc
 pvcreate /dev/sdd
 pvcreate /dev/sde
 pvcreate /dev/sdf
 pvcreate /dev/sdg
 pvcreate /dev/sdh
 
 ## create new volume groups
 vgcreate netwitness_vg01 /dev/sdb
 vgcreate netwitness_vg02 /dev/sdc
 vgcreate netwitness_vg03 /dev/sdd
 vgcreate netwitness_vg04 /dev/sde
 vgcreate netwitness_vg05 /dev/sdf
 vgcreate netwitness_vg06 /dev/sdg
 vgcreate netwitness_vg07 /dev/sdh
 
 ## create and size new logical volumes
 lvcreate -l 100%FREE netwitness_vg01 -n conc_index
 lvcreate -l 100%FREE netwitness_vg02 -n conc_metadb
 lvcreate -l 100%FREE netwitness_vg03 -n conc_sessiondb
 lvcreate -l 100%FREE netwitness_vg04 -n dec_indexdb
 lvcreate -l 100%FREE netwitness_vg05 -n dec_metadb
 lvcreate -l 100%FREE netwitness_vg06 -n dec_sessiondb
 lvcreate -l 100%FREE netwitness_vg07 -n dec_packetdb
 
 ## construct XFS file system from logical volumes
 mkfs.xfs /dev/netwitness_vg01/conc_index
 mkfs.xfs /dev/netwitness_vg02/conc_metadb
 mkfs.xfs /dev/netwitness_vg03/conc_sessiondb
 mkfs.xfs /dev/netwitness_vg04/dec_index
 mkfs.xfs /dev/netwitness_vg05/dec_metadb
 mkfs.xfs /dev/netwitness_vg06/dec_sessiondb
 mkfs.xfs /dev/netwitness_vg07/dec_packetdb
 
 lvscan
 vgscan
 
 cd /var/netwitness/concentrator
 mkdir index0
 mkdir metadb0
 mkdir sessiondb0
 
 cd /var/netwitness/decoder
      ## OR
 cd /var/netwitness/logdecoder
 mkdir index0
 mkdir metadb0
 mkdir sessiondb0
 mkdir packetdb0
 
 vi /etc/fstab
 ## add the following lines
 /dev/mapper/netwitness_vg01-conc_index /var/netwitness/concentrator/index0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg02-conc_metadb /var/netwitness/concentrator/metadb0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg03-conc_sessiondb /var/netwitness/concentrator/sessiondb0 xfs defaults,noatime 1 2
 ## packet hybrid
 /dev/mapper/netwitness_vg04-dec_index /var/netwitness/decoder/index0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg05-dec_metadb /var/netwitness/decoder/metadb0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg06-dec_sessiondb /var/netwitness/decoder/sessiondb0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg07-dec_packetdb /var/netwitness/decoder/packetdb0 xfs defaults,noatime 1 2
 ## log hybrid
 /dev/mapper/netwitness_vg04-dec_index /var/netwitness/logdecoder/index0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg05-dec_metadb /var/netwitness/logdecoder/metadb0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg06-dec_sessiondb /var/netwitness/logdecoder/sessiondb0 xfs defaults,noatime 1 2
 /dev/mapper/netwitness_vg07-dec_packetdb /var/netwitness/logdecoder/packetdb0 xfs defaults,noatime 1 2
 ## save
 
 mount -a
 df -h
 
## add additional storage mount paths within UI
##restart service

Next Topic:Procedures
You are here
Table of Contents > Content Development > Tools > Virtual Hosts Additional Storage Playbook

Attachments

    Outcomes