cancel
Showing results for 
Search instead for 
Did you mean: 
zaffar
Level 7

i have created ESM combobox in VM but i am unable to add storage pool ?

i have ESMcreated combobox in VM but i am unable to add storage pool ?

0 Kudos
9 Replies
catdaddy
Level 20

Re: i have created ESM combobox in VM but i am unable to add storage pool ?

​,

                Could you kindly confirm that possibly moving this discussion to (SIEM) would better enhance your assistance here mentioned?

Thanks

Cliff

Moderator

Consumer Products

Cliff
McAfee Volunteer
0 Kudos
exbrit
Level 21

Re: i have created ESM combobox in VM but i am unable to add storage pool ?

I would move it there anyway.

0 Kudos
catdaddy
Level 20

Re: i have created ESM combobox in VM but i am unable to add storage pool ?

Moved from Community Support to Security Information and Event Management (SIEM > Discussions

For better exposure and quicker assistance.

Cliff
McAfee Volunteer
0 Kudos
paul.k
Level 10

Re: i have created ESM combobox in VM but i am unable to add storage pool ?

You can not use onboard storage. You have to have an external share NFS (preferred) or CIFS (not preferred)

It must be at least 504 GB in size 500 will be reserved for the DB so you will only have 4 GB for storage.

Once you do that it will allow you to assign pools

0 Kudos
zaffar
Level 7

Re: i have created ESM combobox in VM but i am unable to add storage pool ?

Thanks for your response ,

Can you give me detailed steps of external share NFS or CIFS , if possible

0 Kudos
abanaru
Level 11

Re: i have created ESM combobox in VM but i am unable to add storage pool ?

Because it's virtual add another hard drive from VMWare to the virtual machine and you won't have to worry about CIFS or NFS.

My recommendation is to add a 500GB and bit more... 504GB should work as paul.k said and then a second one which will be used for the actual ELM raw events storage.

0 Kudos
auguste
Level 7

Re: i have created ESM combobox in VM but i am unable to add storage pool ?

Is it works if you add just a hard drive from VmWare ?

Process which is define an ELM storage device, migrate the Db then add an ELM storage pool is still mandatory ?

To get only 4 GB for raw events.. it is not recommanded as It should store few sources during 6 month, 1 year or more, isnt'it ?

0 Kudos
abanaru
Level 11

Re: i have created ESM combobox in VM but i am unable to add storage pool ?

That storage (504GB) should be used for the management database only. Don't use the 4GB that become available after the DB is migrated.

Just create a new storage block and put raw events on that.

0 Kudos
auguste
Level 7

Re: i have created ESM combobox in VM but i am unable to add storage pool ?

Thanks Abaru.

- So just add one hard drive from VmWare should be detected in order to add disk space ? (VM Combo Box)

- Another question which is not linked to this case : if we would like to add SAN storage with 3072 GB (Hardware Combo box), should we follow the process : add 1 storage device, then add 1 storage pool and define 3072 GB space disk ?

Thank you in advance

0 Kudos