Azure Upgrade: Migrate Disk Drives

Document created by RSA Information Design and Development on Apr 12, 2019
Version 1Show Document
  • View in full screen mode
 

These instructions tell you how to upgrade Azure NetWitness VMs from 10.6.6.x to 11.3.0.0 on Azure Cloud Platform.

 

Prerequisites:

 

Note: Azure PowerShell 4.4.1 was used for qualification.

Note: Both versions of VMs must be on the same Virtual Network and Resource Group for the migration.

Caution: 1) You cannot perform the migration if you have a snapshot for your VM.
2). Run the backup immediately before you upgrade hosts for each phase so that the data is not out-dated.
3.) This guide applies to virtual host upgrades exclusively. If have physical and virtual hosts in your deployment, see the RSA NetWitness® Platform Physical Host Upgrade Instructions for the steps you must complete to upgrade physical hosts. Go to the Master Table of Contents to find all NetWitness Platform Logs & Network 11.x documents.

Complete the following tasks to migrate your Virtual Machine (VM) deployment disk drives from 10.6.6.x to 11.3:

Task 1 - Deploy NW 11.3 VM

Task 2 - Delete Virtual Machine and OS disk resource of NW 10.6.6 VM

Task 3 - Install Azure PowerShell modules on a local Windows machine

Task 4 - IP Retention: Run the PowerShell script

Task 5 - Perform Disk Migration

Task 6 - Data Restoration

Task 1 - Deploy NW 11.3 VM

  1. Deploy NW 11.3 VMs. [Refer to the Azure deployment guide for v 11.x.
  2. Power OFF all the NW 10.6.6 and 11.3 VMs.
  3. In the Azure Portal, navigate to Virtual machines.
  4. Click on the <Name_of_the_VM>.
  5. Click Overview and then click Stop.

Task 2 - Delete Virtual Machine and OS disk resource of NW 10.6.6 VM

Note the other resources like Data disks and Network Interface.

  1. Delete the ‘Virtual machine’ and the 'OS disk' (usually disk1 of VM) resource of NW 10.6.6 VM and make a note of these Network interface and Data disks.

Note: Delete only these 2 resources and retain all other resources of NW 10.6.6 VMs like 'Network interface', 'Network security group' and 'Data disks') and make a note of these 'Network interface' and 'Data disks'.

  1. In the Azure Portal, navigate to All resources. Select the Name_of_NW_10.6.6_VM.
  2. Click Delete.

Task 3 - Install Azure PowerShell modules on a local Windows machine

Install the Azure PowerShell modules on a local Windows machine and Login to Azure Resource Manager.

Navigate to Azure PowerShell on the Windows machine where you have installed the Azure PowerShell modules and log in to Azure Resource Manager using the below command

Note: Make sure you have followed the steps mentioned in the Prerequisites section above before executing the below command.

Login-AzureRmAccount

Login using the Azure credentials in the window that appears.

Task 4 - IP Retention: Run the PowerShell script

Run the PowerShell script for MAC retention for all NW Components. MAC address and IP retention:

MAC address and IP are bound to the 'Network interface' resource of a VM.

The Azure portal doesn't allow us to

  • Specify an existing network interface to add when creating the VM
  • Create a VM with multiple network interfaces
  • Specify a name for the network interface (the portal creates the network interface with a default name)

This can be achieved using the Azure PowerShell. [https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface-vm]

Click here to download and run the script by providing the requested parameters on the Windows machine installed with Azure PowerShell to retain the 'Network interface' from NW 10.6.6 VM to 11.3 VM.

You should be able to see NW 10.6.6 VM’s NIC attached to 11.3 VM under ‘Networking’ settings after successful execution of the script.

Task 5 - Perform Disk Migration

Add all the disks (except the 'OS disk') of NW 10.6.6 VM to the corresponding NW 11.3 VM under the ‘Disks’ settings.

In Azure Portal, navigate to Virtual machines and then Name_of_the_11.3_VM. Click Disks and then click + Add data disk. Select all disks of corresponding NW-10.6.6 VM which you had noted down earlier in the dropdown list that appears.

Click Save.

Power ON the NW 11.3 VM and login with the credentials provided during VM deployment and set the root password as netwitness.

Task 6 - Data Restoration

Copy NW 10.6.6 VM's backed up data (nw-backup) to NW 11.3 VM.

Note: Do the Data Restoration for SA Server first followed by other components

For SA, LD/LC, Virtual Log Collector, Concentrator, Archiver, Broker:

  1. Create a directory under /tmp/ by the name nwhome.
  2. Mount VolGroup00-nwhome on /tmp/nwhome/.

mount /dev/mapper/VolGroup00-nwhome /tmp/nwhome/

  1. Copy the contents of /tmp/nwhome/ directory to /var/netwitness/

cp -R /tmp/nwhome/* /var/netwitness/

  1. Unmount VolGroup00-nwhome from /tmp/nwhome/

umount /dev/mapper/VolGroup00-nwhome /tmp/nwhome/

For ESA:

  1. Create a directory under /tmp/ by the name apps.
  2. Mount VolGroup01-apps temporarily on /tmp/apps/

mount /dev/mapper/VolGroup01-apps /tmp/apps/

  1. Copy nw-backup directory from here to /var/netwitness

cp -r /tmp/apps/database/nw-backup /var/netwitness

  1. Unmount VolGroup01-apps from /tmp/apps/

umount /tmp/apps/

Perform disk mounting by running the below commands:

For NW Server: 

mount /dev/mapper/VolGroup01-ipdbext /var/netwitness/ipdbextractor/

mount /dev/mapper/VolGroup02-redb /var/netwitness/database/

Add below entries for these mounts in /etc/fstab:

/dev/mapper/VolGroup01-ipdbext /var/netwitness/ipdbextractor/ xfs defaults,noatime,nosuid 1 2

/dev/mapper/VolGroup02-redb /var/netwitness/database/ xfs defaults,noatime,nosuid 1 2

For LogDecoder/LogCollector:

mount /dev/mapper/VolGroup01-decoroot /var/netwitness/logdecoder

mount /dev/mapper/VolGroup01-index /var/netwitness/logdecoder/index

mount /dev/mapper/VolGroup01-sessiondb /var/netwitness/logdecoder/sessiondb

mount /dev/mapper/VolGroup01-metadb /var/netwitness/logdecoder/metadb

mount /dev/mapper/VolGroup01-logcoll /var/netwitness/logcollector

mount /dev/mapper/VolGroup01-packetdb /var/netwitness/logdecoder/packetdb

Add below entries for these mounts in /etc/fstab:

/dev/mapper/VolGroup01-decoroot /var/netwitness/logdecoder ext4 defaults,noatime,nosuid 1 2

/dev/mapper/VolGroup01-index /var/netwitness/logdecoder/index xfs defaults,noatime,nosuid 1 2

/dev/mapper/VolGroup01-sessiondb /var/netwitness/logdecoder/sessiondb xfs defaults,noatime,nosuid 1 2

/dev/mapper/VolGroup01-metadb /var/netwitness/logdecoder/metadb xfs defaults,noatime,nosuid 1 2

/dev/mapper/VolGroup01-logcoll /var/netwitness/logcollector xfs defaults,noatime,nosuid 1 2

/dev/mapper/VolGroup01-packetdb /var/netwitness/logdecoder/packetdb xfs defaults,noatime,nosuid 1 2

For Virtual LogCollector:

mount /dev/mapper/VolGroup01-logcoll /var/netwitness/logcollector

Add below entry for these mounts in /etc/fstab:

/dev/mapper/VolGroup01-logcoll /var/netwitness/logcollector xfs defaults,noatime,nosuid 1 2

For Concentrator:

mount /dev/mapper/VolGroup01-concroot /var/netwitness/concentrator

mount /dev/mapper/VolGroup01-sessiondb /var/netwitness/concentrator/sessiondb

mount /dev/mapper/VolGroup01-index /var/netwitness/concentrator/index

mount /dev/mapper/VolGroup01-metadb /var/netwitness/concentrator/metadb

Add below entries for these mounts in /etc/fstab:

/dev/mapper/VolGroup01-concroot /var/netwitness/concentrator ext4 defaults,noatime,nosuid 1 2

/dev/mapper/VolGroup01-sessiondb /var/netwitness/concentrator/sessiondb xfs defaults,nosuid,noatime 1 2

/dev/mapper/VolGroup01-index /var/netwitness/concentrator/index xfs defaults,noatime,nosuid 1 2

/dev/mapper/VolGroup01-metadb /var/netwitness/concentrator/metadb xfs defaults,noatime,nosuid 1 2

For Archiver:

mount /dev/mapper/VolGroup01-archiver /var/netwitness/archiver

mount /dev/mapper/VolGroup02-workbench /var/netwitness/workbench

Add below entries for these mounts in /etc/fstab:

/dev/mapper/VolGroup01-archiver /var/netwitness/archiver xfs defaults,nosuid,noatime 1 2

/dev/mapper/VolGroup02-workbench /var/netwitness/workbench xfs defaults,nosuid,noatime 1 2

For Broker:

mount /dev/mapper/VolGroup01-broker /var/netwitness/broker

Add below entry for these mounts in /etc/fstab:

/dev/mapper/VolGroup01-broker /var/netwitness/broker xfs defaults,nosuid,noatime 1 2

Task 7 - Delete all NW 11.3 Deployment 'Network interface' Resources

  1. In Azure Portal, go to All resources.
  2. Click on <Name_of_NW_11.3_Network_interface> and select Delete.

Previous Topic:Backup Instructions
You are here
Table of Contents > Migrate Disk Drive

Attachments

    Outcomes