In some circumstances, multiple disks in DAC show as being in a foreign state in nwraidutil.pl output as shown below: Note: For 11.3 and above please use /opt/rsa/saTools/nwraidtool.py -b for disks information.
In the above nwraidutil.pl output, Enclosure 79 has multiple Unconfigured (Foreign) state disks. When the foreign configuration is imported, it fails as below:
[root@XXXX ~]# /opt/MegaRAID/MegaCli/MegaCli64 -CfgForeign -Import -a1
FW does not have Security key, create Security key first.
Failed to import foreign configuration on controller 1.
FW error description:
Foreign drives cannot be imported, as they do not form a complete configuration.
Exit Code: 0x3b
In the above nwraidutil.pl output, Enclosure 79 has multiple Unconfigured (Good) disks. When trying to bring disks online, it fails as below:
[root@XXXX ~]# /opt/MegaRAID/MegaCli/MegaCli64 -PDOnline -PhysDrv [95:0,95:1,95:2,95:3,95:4,95:5,95:6,95:7,95:8,95:9,95:10,95:11,95:12,95:13] -a1
Adapter: 1: Failed to change PD state at EnclId-95 SlotId-0.
Exit Code: 0x01
This issue may be due to either communication failure between Appliance and DAC or from new disks inserted which have a different configuration from other disks and are detected as Foreign.
Please follow the below steps in sequence to fix these multiple disk issues.
Login to NetWitness Logs & Network GUI as admin.
Navigate to Administration->Services, Select the Service which has disk issues and Navigate to Config->General page.
a. Disable Capture Autostart (in case of Packet or Log Decoder) OR b. Disable Aggregate Autostart (in case of Concentrator or Archiver)
Login to putty session as an administrator.
Edit /etc/fstab file to comment out /var/netwitness/<service> filesystem by placing # before each line. Note:<service> will be decoder/logdecoder/concentrator/archiver