Correcting /etc/fstab for missing /pfs filesystem entry in Security Analytics

book

Article ID: 168241

calendar_today

Updated On:

Products

Security Analytics

Issue/Introduction

The /pfs mounting command may not be entered into /etc/fstab after an upgrade. A good indication of this is that after the upgrade is complete, you cannot start capture again.  If you log in to the command line interface and run 'df -h', you'll notice that /pfs is not mounted.

Resolution

Run dsrinfo -p to determine where the configuration thinks the capture data exists.  You will see something like:

/dev/sdc1 

This should match /etc/solera/config/capture-config
ls -l /dev/disk/by-id | grep sdc or often it is sdc1

You will see something like:
scsi-36d4ae520a554d40018926ec005b37c46-part1

vi /etc/fstab
Put the results from the ls-l above to look like:
scsi-36d4ae520a554d40018926ec005b37c46-part1    /pfs    dsfs  nosuid  0 2

Then reboot to bring up the appliance properly.