Storage: Appendix B. Sample Storage Configuration Scenarios

Document created by RSA Information Design and Development on Aug 5, 2019Last modified by RSA Product Team on Oct 16, 2019
Version 7Show Document
  • View in full screen mode

This appendix illustrates the following example of how to configure storage on two non-encrypted 15-drive DAC external storage devices.

Configure Storage for Archiver

The following scenario configures storage on one, non-encrypted, 15-Drive DAC for an Archiver physical host.

  1. Execute the raidList command.
    1. Record the Controller Number, Enclosure Number, In Use, Drives, and Devices.
      You should see the following information.
      In Use: FALSE
      Devices: <empty>
    2. Verify the Drive Count, Size, and Vendor.
      The following example illustrates what you should see before you create a RAID array.
  2. Execute the raidNew command with the following parameters using the controller number and the enclosure number you just recorded.
    controller=1 enclosure=0 scheme=archiver commit=1
    The following example illustrates what you should see after you create a RAID array.
  3. Execute the raidList command to verify the new RAID array.
    You should now see the following information.
    In Use: TRUE
    Devices: <device>
    (for example, sdc)
  4. Execute the partNew command with the following parameters to create partitions and mount points in the etc/fstab file.
    name=<device> (for example, sdc) service=archiver volume=archiver commit=1
  5. Execute the srvAlloc command with the following parameters to allocate the space to the archiver service. This adds storage to the archiver service configuration and restarts the service every time it is executed.
    service=archiver volume=archiver0 commit=1

  6. Confirm the “Hot Storage” in “Data Retention”.
  7. Reconfigure the following Archiver service to detect and take advantage of all of the free space as described in Task 5 - Reconfigure Services and Databases to Detect and Appropriately Use New Storage.

Configure Storage for Network (Packet) Decoder

The following scenario configures storage on two, non-encrypted, 15-Drive DACs for a Network Decoder for 10G Capture physical host.

  1. Execute the raidList command.
    1. Record the Controller Number, Enclosure Number, In Use, Drives, and Devices.
      You should see the following information.
      In Use: FALSE
      Devices: <empty>
    2. Verify the Drive Count, Size, and Vendor.
      The following example illustrates what you should see before you create a RAID array.
  2. Execute the raidNew command with the following parameters using the controller number and the enclosure number you just recorded.
    • Parameters for the first enclosure:
      controller=1 enclosure=0 scheme=decoder commit=1
    • Parameters for the second enclosure:
      controller=1 enclosure=2 scheme=decoder commit=1
  3. Use the raidList command to display block devices for enclosures so you can verify In Use: TRUE.
  4. SSH to the Network Decoder and use the lsblk command to confirm sizes for decodersmall.

Note: For RAID configuration, when you use the decoder for 10G Capture you use decoder for both enclosures for performance reasons. When you do not use the decoder for 10G Capture, you use the decoder and archiver for the enclosures to maximize storage for becuase the second enclosure is a single RAID under the archiver configuration.

  1. Execute the partNew command to create the decodersmall partition first (decoder dir, index, metadb, sessiondb) (First Enclosure, SDC, SDD) with the following parameters.
    name=sdc service=decoder volume=decodersmall commit=1

  2. Execute the partNew command to create the decoder volume (packetdb) (First Enclosure, SDC, SDD) with the following parameters.
    name==sdd service=decoder volume=decoder commit=1


    In the following example, the following partions are created for SDC, SDD (Enclosure 0).

    At this point, you add the second DAC enclosure.
  1. Execute the partNew command to create the decodersmall partition first (Second Enclosure, SDE, SDF) with the following parameters.
    name=sde service=decoder volume=decodersmall commit=1

  2. Execute the partNew command to create the packetdb decoder volume (Second Enclosure SDE, SDF) with the following parameters.
    name=sdf service=decoder volume=decoder commit=1


  3. Execute the srvAlloc command with the following parameters to add the storage information into the Service Configuration settings.
    • service=decoder volume=decodersmall commit=1
    • service=decoder volume=decodersmall0 commit=1
    • service=decoder volume=decoder commit=1
    • service=decoder volume=decoder0 commit=1

  4. Reconfigure the following Network Decoder service and its database to detect and take advantage of all of the free space as described in Task 5 - Reconfigure Services and Databases to Detect and Appropriately Use New Storage.

Configure Storage for Network Concentrator

The following scenario configures storage on one, non-encrypted, 15-Drive DAC for a Network Concentrator physical host.

  1. Execute the raidList command.
  2. Execute the raidNew command with the following parameters.

    controller=1 enclosure=6 scheme=concentrator


  1. Execute the partNew command to create the concentrator partition first with the following parameters. You must create the concentrator volume before index volume or it will fail.

    name=sdd service=concentrator volume=concentrator commit=1

  2. Execute the partNew command with the following parameters with the following parameters to create an index on SSDs.
    name=sdc service=concentrator volume=index commit=1


  3. Execute the srvAlloc command with the following parameters.
    service=concentrator volume=index commit=1

  4. Execute the srvAlloc command with the following parameters.
    service=concentrator volume=concentrator commit=1

  5. Reconfigure the following Network Concentrator service and its database to detect and take advantage of all of the free space as described in Task 5 - Reconfigure Services and Databases to Detect and Appropriately Use New Storage.

Configure Storage for Log Decoder Hybrid

The following scenario configures storage on one, non-encrypted, 15-Drive DAC for a Log Decoder Hybrid physical host.

  1. Execute the raidList command.
  2. Execute the raidNew command with the following parameters.
    controller=1 enclosure=31 scheme=log-hybrid commit=1

  3. Execute the partNew command with the following parameters with the following parameters.
    • name=sdf service=concentrator volume=concentrator commit=1

    • name=sdg service=logdecoder volume=logdecoder commit=1

  4. Execute the srvAlloc command with the following parameters.
    • service=concentrator volume=concentrator0 commit=1

    • service=logdecoder volume=logdecoder0 commit=1
  5. Reconfigure the following Log Decoder service and its database to detect and take advantage of all of the free space as described in Task 5 - Reconfigure Services and Databases to Detect and Appropriately Use New Storage.

 

 

 

 

You are here

Table of Contents > Appendix B. Sample Storage Configuration Scenarios

Attachments

    Outcomes