-
Title
How to extend the disk size of a Syslog-ng Store Box virtual appliance -
Description
By default Syslog-ng Store Box (SSB) sends an email or SNMP alert to the administrator with the subject "Disk usage is above the defined ratio".The SSB cannot accept any log messages while the configuration web user interface is inaccessible.
-
Cause
SSB can only use the disk space that has been allocated by the virtual host. The appliance cannot write additional data on the disk because there is no free space remaining on the disk.
-
Resolution
WARNING!
- The machine that runs SSB must be a virtual machine, this procedure will not work on a physical machine.
- The core firmware must be installed on a standard Linux partition, but not on a DRBD device.
RESOLUTION
Core firmware partition check
With SSB 5 LTS or later versions extend the disk by running the process described in this knowledge article.
If upgraded from an earlier version extend the disk manually using our internal script.
Open a support ticket and ask for the script and guide.- Log in to the boot shell
- Execute the following command
df -h /mnt/drbd
- Check "Filesystem" field
- If the device name is something like /dev/Xda4, the disk can be resized automatically using this procedure.
Letter X might vary on different systems. Usually it is 's' or 'v'.
Filesystem Size Used Avail Use% Mounted on
/dev/sda4 12G 8.9G 2.9G 76% /mnt/drbd
- If the device is /dev/drbd0 check section "Enlarge DRBD disk"
Filesystem Size Used Avail Use% Mounted on
/dev/drbd0 12G 8.9G 2.9G 76% /mnt/drbd
STEPS:
- To ensure that no data is lost in case of an error, create a full system backup (configuration and data backup). For detailed instructions, see "Data and configuration backups" in the Administration Guide.
- Power down the virtual machine.
- Increase the storage size.
- Restart SSB.
Extend DRBD disk
There are two options if SSB uses DRBD device for the core firmware.
1. Migrate the SSB to a new virtual machine using the knowledge article "Migration of Syslog-ng Store Box to a new appliance".
2. The DRBD device can be extended with a script that our support can provide along with the documentation.
To get it open a support case an upload a fresh debug bundle to verify SSB installation.
The first option is recommended because of the following reasons.
- It has less risk of failures.
- The new SSB will not have DRBD device, so disk extension can be done automatically later.
- The downtime of SSB can be much shorter in case of storing minimal data on SSB.
(Only a retention time of a few days is configured in the archive policies)