FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
nsoni
Staff
Staff
Article Id 303182
Description The article describes the steps to extend the / lvm partition on a FortiSIEM node.
Scope FortiSIEM
Solution
  1. Using Hypervisor (for example, ESX), add a new disk of the size needed (25G or 50G) to the FortiSIEM VM.

  2. Login to the FortiSIEM CLI and run the 'lsblk' command and find the name of the new hard disk added.

    For example:

NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 25G 0 disk
├─sda1 8:1 0 1G 0 part /boot
└─sda2 8:2 0 24G 0 part
├─rl-swap 253:0 0 2.5G 0 lvm [SWAP]
└─rl-root 253:1 0 21.5G 0 lvm /
sdb 8:16 0 100G 0 disk
├─sdb1 8:17 0 22.4G 0 part [SWAP]
└─sdb2 8:18 0 68.9G 0 part /opt
sdc 8:32 0 60G 0 disk
└─sdc1 8:33 0 60G 0 part /cmdb
sdd 8:48 0 60G 0 disk
└─sdd1 8:49 0 60G 0 part /svn
sde 8:64 0 61G 0 disk /data

 

  1. Create a Physical Volume using the new disk.

 

pvcreate <new_disk_name>

 

For example:

 

pvcreate /dev/sdx

 

  1. Run the following command and note the current volume group (VG) size.

 

vgdisplay

 

For example:

 

--- Volume group ---
VG Name rl
System ID
Format lvm2
Metadata Areas 1
Metadata Sequence No 3
VG Access read/write
VG Status resizable
MAX LV 0
Cur LV 2
Open LV 2
Max PV 0
Cur PV 1
Act PV 1
VG Size <24.00 GiB
PE Size 4.00 MiB
Total PE 6143
Alloc PE / Size 6143 / <24.00 GiB
Free PE / Size 0 / 0
VG UUID Oo8x27-PLgU-NMLg-1BQ8-hw5U-2boo-dMb0Kl

 

  1. Add a physical volume to the existing volume group 'rl':

 

vgextend rl <new_disk_name>

  1. Note the free size (Free PE / Size) in volume group 'rl':

 

vgdisplay

 

  1. Extend the / lvm partition:

 

lvextend -l +100%FREE /dev/rl/root

 

  1. Extend file system of / lvm partition:

 

xfs_growfs /dev/rl/root

 

  1. Run the 'df -h' command to verify the size of / partition.
Contributors