FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
mkannan
Staff
Staff
Article Id 192804

Description

 

This article explains how to add new disks on FortiManager or FortiAnalyzer instances in Microsoft Azure.
 
Scope
 
FortiAnalyzer and FortiManager, Microsoft Azure.


Solution

 

The steps are identical for both FortiManager and FortiAnalyzer. This article will explain the process with a FortiAnalyzer instance.
 
Note: If the user is using BYOL (Bring Your Own License), disk storage size is based on the license purchased. If the license is On-Demand, disks can be added as required.
 
The default disk size is 1072 GB:
 
Stephen_G_0-1677063593424.png

 

Follow the steps below to add a disk.

 

Step 1: Verify the instance status under the Overview panel of the FortiAnalyzer instance.

 

Stephen_G_1-1677063711305.png

 

Step 2: Shut down the instance with the Stop button.
 
Stephen_G_2-1677063744366.png

 

Step 3: Navigate to the Disks tab under the Settings section to view FortiAnalyzer instance disks. Here, the existing instance disk will be shown (2GB) along with the data disk (1TB):
 
Stephen_G_3-1677063827182.png

 

Select 'Add data disk' and 'Create disk':
 
Stephen_G_4-1677063894835.png

 

Enter the disk details:
-Name of the disk: Disk-2-500GB.
- Resource group: [Use the same resource group where FAZ instance is deployed].
- Account type: Standard HDD.
- Source type: None (empty disk).
- Size (GiB): 500.
 
Select 'Create' to create the disk.
 
Stephen_G_5-1677063998483.png

 

Wait for validation to complete:

 

Stephen_G_6-1677064161684.png

 

After the new disk is added, select Save to save the changes on the disk level:

 

Stephen_G_7-1677064218945.png

 

At this stage, the new disk disk has been created and added to the FortiAnalyzer instance.

 
Step 4: Power on the FortiAnalyzer instance.
 
Stephen_G_8-1677064350589.png

Verify the disk details are correct in the CLI after the FortiAnalyzer instance starts:

 
# execute lvm info
 
The disk has been added successfully, but is in an unused state:

 

Stephen_G_9-1677064505771.png

 

Step 5: Extend the added disk. Run the following command in the CLI:

 

# execute lvm extend

 

Stephen_G_10-1677064547810.png

 

Enter 'y' to reboot the FortiAnalyzer instance.

 

Step 6: Once again, verify the disk status:

 
# execute lvm info
 
Stephen_G_11-1677064617112.png

 

The disk will display as 'Used' and will be used by the FortiAnalyzer instance.

 

Related article:

Technical Tip: FortiAnalyzer swap size dependency on RAM and storage disk