search cancel

Disk drive failed in Security Analytics storage array


Article ID: 211534


Updated On:


Security Analytics


Security Analytics storage arrays contain many hard drives.  These drives can fail at any given moment.  All Security Analytics storage arrays are configured with redundant RAID 5 volumes.  Managed SAN storage arrays such as the Dell MD3860f, the NetApp E5660 or the Dell ME4024 storage arrays may have hot spares configured to assist with hard drive failures.   

Other errors that may indicate a failed drive 

"DEGRADED_VOLUME-Recovery Failure" 

"VOLUME_HOT_SPARE_IN_USE-Recovery Failure"

"Volume not on preferred path due to AVT/RDAC failover"




A hard drive has failed and needs to be replaced.


If you encounter any failed hard drives in the system, make sure the system is under support entitlement and open a case with technical support to get the drive replaced.  Support will need any supporting log files such as the Customer Service Report (CSR) and any support files available with the storage arrays themselves.  

If the failed drive is in the main head unit or your external storage consists of the Promise J5300 devices, generate a CSR from the Settings > System page in the Security Analytics GUI.

The following knowledge base articles will help in determining your hardware and in generating logs.

Shipping addresses will also be required with contact name and phone number. Will you need a field tech to replace the component?  Attach the supporting log files to the case if you are opening the case through the support portal.

Additional Information

To review the specific information about a drive, you can run megacli -pdinfo -physdrv [E:S] -aX.  Using lsi-show, find the location of the drive.

Find the adapter number in the Controller Information, in the first column under Id.  It is either 0, 1, or 2.

Find the Enclosure Id under Enclosure Information and find the number in the first column under Id. 

Find the Slot id in Physical Drive Information in the second column under the label "E:S".  In the example below it is the second parameter of 32:0 or 32:1.  The Slot would be 0 or 1.

For example, enclosure 32, Slot 2, Adapter 0.  The command would be megacli -pdinfo -physdrv [32:2] -a0

megacli -pdinfo -physdrv [32:2] -a0
Enclosure Device ID: 32
Slot Number: 2
Device Id: 2
Sequence Number: 2
Media Error Count: 0
Other Error Count: 0
Predictive Failure Count: 0
Last Predictive Failure Event Seq Number: 0
PD Type: SAS
Raw Size: 931.512 GB [0x74706db0 Sectors]
Non Coerced Size: 931.012 GB [0x74606db0 Sectors]
Coerced Size: 931.0 GB [0x74600000 Sectors]
Firmware state: Online, Spun Up
SAS Address(0): 0x5000c50083c50a85
SAS Address(1): 0x0
Connected Port Number: 6(path0) 
Inquiry Data: SEAGATE ST91000642SS    ASFD9XG8YPKZ            
FDE Capable: Capable
FDE Enable: Disable
Secured: Unsecured
Locked: Unlocked
Needs EKM Attention: No
Foreign State: None 
Device Speed: 6.0Gb/s 
Link Speed: 6.0Gb/s 
Media Type: Hard Disk Device

Exit Code: 0x00


The sample lsi-show output.

Controller Information
Id   Serial No        Firmware             Encl LD   PD   Product Name
a0   5C801BU          4.250.00-4402        1    1    8    PERC H730P Mini

Enclosure Information
Id   Drives
32   0   1   2   3   4   5   6   7  

Logical Drive Information
Id   Size         Status       Stripe   Raid Level   Cache
0    6.364 TB     Optimal      64 KB    Primary-5    WriteBack, ReadAdaptive, Direct, Write Cache OK if Bad BBU
  by id: 0,1,2,3,4,5,6,7
  by es: 32:0,32:1,32:2,32:3,32:4,32:5,32:6,32:7

Physical Drive Information
Id   E:S      Status                         FC       Size           Inquiry
0    32:0     Online, Spun Up                None     931.512 GB     SEAGATE ST91000642SS    ASFD9XG8YGML
1    32:1     Online, Spun Up                None     931.512 GB     SEAGATE ST91000642SS    ASFD9XG8YGKH
2    32:2     Online, Spun Up                None     931.512 GB     SEAGATE ST91000642SS    ASFD9XG8YPKZ
3    32:3     Online, Spun Up                None     931.512 GB     SEAGATE ST91000642SS    ASFD9XG8YGXW
4    32:4     Online, Spun Up                None     931.512 GB     SEAGATE ST91000642SS    ASFD9XG8YHSJ
5    32:5     Online, Spun Up                None     931.512 GB     SEAGATE ST91000642SS    ASFD9XG8YQH5
6    32:6     Online, Spun Up                None     931.512 GB     SEAGATE ST91000642SS    ASFD9XG8YQQS
7    32:7     Online, Spun Up                None     931.512 GB     SEAGATE ST91000642SS    ASFD9XG8YPND