Increase Disk Space
Assume that this ESM system is experiencing heavier than expected event traffic on ESM, and as a result it is necessary to increase the size of the shared disk to 5TiB (5,242,880 MiB). This section describes how to do that. Note that this process can be accomplished without stopping ESM or unmounting the shared disk.
Purchase a new disk array for each server with the needed capacity. For this example, we assume that the system purchased was a 12x600GB (15K RPM) disk array. Using the Red Hat Facilities to format this as a single RAID 10 partition yields 3.6TB of usable disk space, which is equivalent to 3.3TiB. Assume the name of this partition is /dev/md11. Add this partition to the volume group on each server by running (as root) the following command:
vgextend vg00 /dev/md11
This change requires an increase to the size of the metadata volume. The metadata volume on each server must be at least 177 MiB, using the equation:
size = (5767168 MiB/32768) + 1
Rounding up to the nearest multiple of 32 gives 192 MiB for the new metadata partition size. The following command is run as root on each server to increase the size of the metadata partition:
lvresize –L 192M vg00/metadata
Increase the size of the shared disk partition (not the filesystem) on both the primary and the secondary to its maximum size. Do that with the following command (as root):
lvresize –l +100%FREE vg00/opt
Inform the APHA software that the partition has increased in size by running the following command as root on the primary:
./arcsight_cluster increaseDisk
Increase the size of the filesystem on the primary. As the command below uses /dev/drbd1, the filesystem increases will be mirrored on the secondary. xfs_growfs is used since this is an XFS filesystem. For an ext4 filesystem resize2fs would be used. Run the following command as root on the primary only:
xfs_growfs /dev/drbd1
After you run this command, the /opt filesystem will be about 5.5 TiB in size.
Finally, go to the ArcSight Command Center, navigate to Administration > Storage and Archive, to the Storage tab, and configure the Default Storage Group to take advantage of this additional disk space. For more information, see the ArcSight Command Center User's Guide.