Add storage devices to make more events and flows available to the Trellix Enterprise Security Manager - Enterprise Log Manager.
Set up storage devices.
Note
When editing storage devices, you can increase the size, but you can't reduce it. You can't delete a device if it's storing data.
On the system navigation tree, select ELM Properties, then click Storage Pools.
Click Add.
On Add Storage Device, fill in the requested information then click OK.
Device Type — Select the type of storage device. Migrating the ELM database requires a minimum of 506 GB of free disk space.
Name — Type a name for the storage device.
Max size — Select the maximum amount of storage space that you want to allocate on this device.
When adding a remote storage device to the ELM, Max size defaults to 4 GB. One percent of the storage space is reserved for management of the remote storage.
When adding a virtual local storage device, Max size defaults to the total storage capacity of the device. Six GB of the storage space is reserved for management of the virtual storage. You can't adjust this field.
IP Address, Remote Mount Point, Remote Path — Type this information for the NFS device.
IP Address, Remote Share Name, Path, Username, Password — Type this information for the CIFS device.
iSCSI Device — Select the device that you added.
iSCSI IQN — Select the IQN.
SAN — Select the SAN volume that you added.
Virtual Local Volume — Select the virtual local storage device. This option is only available when the device type is Virtual Local.
Define connection parameters of a storage device, which is used in a storage pool for data retention.
Data Storage Devices — Select the device you want to add.
Note
You can assign a device to more than one pool at a time.
Storage space — Select the maximum amount of space on this device for storing data.
Note
The system uses 10 percent of the storage space for overhead. For example, if you select 4 GB in the storage space field, 3.6 GB is available to store data.
Mirrored Data Storage Device — To mirror data on this storage device with another device, select the second storage device.