000029173 - How to configure a WARM Tier on an RSA Security Analytics 10.4 Archiver

Document created by RSA Customer Support

on Jun 14, 2016•Last modified by RSA Customer Support

on Apr 21, 2017

Version 4Show Document

Like • Show 0 Likes0
Comment • 0
View in full screen mode

Article Content

Article Number

000029173

Applies To

RSA Product Set: Security Analytics
RSA Product/Service Type: Archiver
RSA Version/Condition: 10.4.x
Platform: CentOS
O/S Version: EL6

Resolution

In order to create a WARM tier on an RSA Security Analytics Archiver appliance, follow the steps below.
1. Create an NFS mount on the NAS, e.g: /mnt/Archiver.

2. Verify that the NFS mount is reachable from the Archiver. In the example below, 10.44.10.68 is the IP address of the NAS.

[root@saarchiver archiver]# showmount -e 10.44.10.68
Export list for 10.44.10.68:
/mnt/Archiver (everyone)

3. Create a directory on the Archiver to mount the NFS.

mkdir /var/netwitness/archiver/nas

4. Add the NFS mount to /etc/fstab.

10.44.10.68:/mnt/Archiver /var/netwitness/archiver/nas nfs rw,nolock,tcp,auto,addr=10.44.10.68 0 0

5. Issue the command mount -a to apply the change.

6. Verify the change with the df -h command, which should show output similar to the example below.

10.44.10.68:/mnt/Archiver
                       96G  223M   96G   1% /var/netwitness/archiver/nas

7. In the Security Analytics UI, navigate to Administration -> Services, click on the Action button for the Archiver, select View -> Config, and click on Add Tier.