Description | This article describes how to delete a mounted disk in ClickHouse if it is no longer usable. |
Scope | FortiSIEM. |
Solution |
To delete a mounted disk in ClickHouse if it is no longer usable, follow these steps:
Step 1: Create a backup of the fstab file and remove the corresponding entry from /etc/fstab:
cat /etc/fstab | grep data-clickhouse (Verify Mount point) sed -i.bak '/data-clickhouse\./d' /etc/fstab (Backup create for fatab file) sed -i.bak '/data-clickhouse/d' /etc/fstab (Remove data-clickhouse line from file) cat /etc/fstab | grep /data-clickhouse
Step 2: Unmount the disk from the server.
rm -rf /data-clickhouse-hot-1 <----- This could be warm or hot, depending on whether it needs to be replaced.
Step 4: Log in to FortiSIEM and remove the node from the GUI by navigating to Admin -> License -> Nodes and remove the node as shown in the screenshot below.
Note: This operation may lead to some warning in /opt/clickhouse/log/clickhouse-server.err.log log file:
<Warning> fsiem.events_replicated (ReplicatedMergeTreePartCheckThread): Found parts with the same min block and with the same max block as the missing part 18250-20250205_371_375_1 on replica 1. Hoping that it will eventually appear as a result of a merge.
These warnings are not affecting the system but if this is frequent run the below command to stop these:
clickhouse-client --query "SYSTEM RESTART REPLICAS" |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.