Skip to content
  • There are no suggestions because the search field is empty.

Does the NetWitness Archiver support Network File Shares (NFS) for Cold storage mounts?

Issue

A NetWitness administrator would like to use a Network File Share (NFS) mount for for Cold storage on an Archiver as mentioned in https://community.netwitness.com/s/article/ConfigureHot-Warm-andColdStorage .

Alternatively, a NetWitness Administrator would like to use a NFS for other purposes on other NW Hosts, such as backups. 


Resolution

A NFS share can be configured on any AlmaLinux NetWitness Host using standard third party implementation documentation written for Alma Linux, RHEL or CentOS and the necessary RPMS & Utilities are part of our base NW Install.

For an Archiver to utilize the storage for Cold tiers, the NFS mount has to be setup properly and available to be seen and written to by the operating system. Once the OS can see and utilize the storage, the Archiver service can be configured to use it by following the available documentation on https://community.netwitness.com/s/article/ConfigureHot-Warm-andColdStorage under the "Configure Total Cold Storage for an Archiver"  subsection. 

Important Note regarding upgrading from 12.3.x to 12.4+ : NFS Mounts have to be temporarily removed prior to the upgrade from 12.3.x to later versions due to the OS migration from CentOS to AlmaLinux. This is documented on all of our Pre-Upgrade task guides beginning with 12.4: https://community.netwitness.com/s/article/UpgradePreparationTasksfor12-4 . The storage may be remounted and utilized post-upgrade. 


Notes

  • NetWitness Support is only responsible for troubleshooting a NFS Mount point once it has successfully been presented to the OS. This includes speed/latency and potential resilience issues. Any issues with the NFS mount point itself are beyond the scope of NW Support.

Product Details

NetWitness Product Set: NetWitness Logs & Network
NetWitness Product/Service Type: Archivers, Operating System
NetWitness Version/Condition: 11.x , 12.x
Platform: CentOS , AlmaLinux


Approval Reviewer Queue

Technical approval queue