Hi,
New to Graylog, and not really a Linux user/admin.
My LAB deployment quickly ran out of disk space.
I searched the web and the documentation for a how to extend the disk, but
could not find a Step by Step guide.
I ended up doing it the following way - I have posted it in-case it can be
helpful to other newbies.
Any comments much appreciated.
*shut down the VM (just incase you mess something up :) )*
*take a snapshot*
*attach new disk in vmware*
*start the VM*
*stop graylog services:*
sudo graylog-ctl stop
*identify new disk disk (a good bet is that it will be sdb):*
sudo lshw -class disk
*Output:*
*-disk
description: SCSI Disk
physical id: 0.0.0
bus info: scsi@2:0.0.0
*logical name: /dev/sdb*
size: 100GiB (107GB)
configuration: sectorsize=512
*-disk
description: ATA Disk
product: VMware Virtual I
physical id: 0.0.0
bus info: scsi@0:0.0.0
logical name: /dev/sda
version: 0001
serial: 00000000000000000001
size: 19GiB (20GB)
capabilities: partitioned partitioned:dos
configuration: ansiversion=5 sectorsize=512 signature=00040ebf
*In this case the new disk is called /dev/sdb*
*format new disk (replace sdb with the disk found with the lshw command):*
sudo mkfs.ext4 /dev/sdb
*create temp mount point for new disk:*
sudo mkdir /mnt/newData
*mount disk to temp mount point*
sudo mount /dev/sdb /mnt/newData
*go to single user mode (might not be necessary, will kill SSH so do it
from console):*
sudo init 1
*copy data to new drive*
sudo cd /var/opt/graylog/data
sudo cp –ax * /mnt/newData
*compare the 2 folders*
sudo diff –qr –suppress-common-lines /var/opt/graylog/data /mnt/newData
*Output should be something like:*
*Only in /mnt/newData: lost+found*
*delete old data folder (to free up disk space on the initial disk)*
sudo rm –r -f /var/opt/graylog/data
*make new mount point*
mkdir /var/opt/graylog/data
*unmount the temp location*
umount /dev/sdb
*mount the new disk to the real location*
mount /dev/sdb /var/opt/graylog/data
*edit fstab to make the mount persistent:*
nano /etc/fstab
*add the folowing line into fstab*
/dev/sdb /var/opt/graylog/data ext4 defaults 0 0
*reboot server*
sudo shutdown –r now
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/9c1e08f9-bb8d-47b8-a338-6395649cc30e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
