Troubleshooting
Problem
QRadar Support is investigating data loss issues associated to M5 v3.2.1 firmware and Samsung solid state drives (SSDs): FRU 01GR787, Model number MZILS3T8HMLHV3. Administrators have reported that applying M5 firmware v3.2.1 caused Samsung SSD drives to be resized, leading to RAID issues and data loss. Administrators should wait for M5 firmware version 3.3.0 that resolves this issue.
Symptom
Data loss due to RAID configuration issues when Samsung SAS 2.5" SSD drives report the incorrect size after the M5 v3.2.1 firmware update.
Environment
Administrators with M5 appliances that contain Samsung solid state drives (FRU 01GR787), Model number MZILS3T8HMLHV3.
Diagnosing The Problem
- Using SSH, log in to the QRadar Console as the root user.
- To get a report of the drives in your deployment, type the following commands:
/opt/qradar/support/all_servers.sh -C "/opt/MegaRAID/MegaCli/MegaCli64 cfgdsply a0|grep -i fru"
/opt/qradar/support/all_servers.sh -C "/opt/MegaRAID/MegaCli/MegaCli64 showsummary a0|grep -i product" - Review the output to determine if either of the values are identified:
- Product Id: MZILS3T8HMLHV3
- FRU: 01GR787
Example of the product ID output:/opt/qradar/support/all_servers.sh -C "/opt/MegaRAID/MegaCli/MegaCli64 showsummary a0|grep -i product"
IP Address -> hostname.example.com
Appliance Type: 3129 Product Version: 7.3.1.20181123182336
15:54:58 up 104 days, 8:01, 0 users, load average: 2.26, 2.35, 2.40
------------------------------------------------------------------------
ProductName : ServeRAID M5210(Bus 0, Dev 0)
Product Id : SAS EXP BP
Product Id : SGPIO
Product Id : MZILS3T8HMLHV3
Product Id : MZILS3T8HMLHV3
Product Id : MZILS3T8HMLHV3
Product Id : MZILS3T8HMLHV3
Product Id : MZILS3T8HMLHV3
Product Id : MZILS3T8HMLHV3
Product Id : MZILS3T8HMLHV3
Product Id : MZILS3T8HMLHV3
Product Id : MZILS3T8HMLHV3
Product Id : MZILS3T8HMLHV3
Product Id : MZILS3T8HMLHV3
Product Id : MZILS3T8HMLHV3
Example of the FRU ID output:
/opt/qradar/support/all_servers.sh -C "/opt/MegaRAID/MegaCli/MegaCli64 cfgdsply a0|grep -i fru"
IP Address -> hostname.example.com
Appliance Type: 3129 Product Version: 7.3.1.20181123182336
15:55:27 up 104 days, 8:01, 0 users, load average: 2.16, 2.32, 2.39
------------------------------------------------------------------------
IBM FRU/CRU: 01GR787
IBM FRU/CRU: 01GR787
IBM FRU/CRU: 01GR787
IBM FRU/CRU: 01GR787
IBM FRU/CRU: 01GR787
IBM FRU/CRU: 01GR787
IBM FRU/CRU: 01GR787
IBM FRU/CRU: 01GR787
IBM FRU/CRU: 01GR787
IBM FRU/CRU: 01GR787
IBM FRU/CRU: 01GR787
IBM FRU/CRU: 01GR787
-
Administrators who have Samsung SSDs matching the product ID or FRU should wait for QRadar firmware version 3.3.0. If you have questions or concerns, contact QRadar Support.
Resolving The Problem
Administrators who have identified Samsung SSDs matching the model number must wait to install M5 firmware version 3.3.0, which is currently in validation. This technical note will be updated and a notice provided via IBM My Notifications when that firmware release v3.3.0 is posted.
If you have questions about this technical note, ask using the community link below or contact QRadar Support for additional information.
Document Location
Worldwide
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Component":"firmware","Platform":[{"code":"PF016","label":"Linux"}],"Version":"3.2.1;M5","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Was this topic helpful?
Document Information
Modified date:
15 March 2019
UID
ibm10876346