How to scale out

For FortiAnalyzer-BigData, you can scale out by adding more extender chassis. See To add an extender chassis:.

For FortiAnalyzer-BigData-VM, you can scale out by adding more virtual machine instances as Data node role to an existing FortiAnalyzer-BigData cluster. See To add a virtual machine instance:.

To add an extender chassis:

The following operation removes all user data from the extender chassis.

1. Ensure both the main and extender chassis are running the same version. To do this, run the following command:

   fazbdctl show version

   Do not connect the links between both chassis until step 2 has been successfully completed; otherwise, it may cause an IP conflict and corruption in the distributed consensus.

2. On the extender chassis, access the Security Event Manager Controller and run the following command:
   

   fazbdctl set appliance <chassis_id>

   For information about accessing the Security Event Manager Controller, see To connect to the Security Event Manager Controller:.

   The chassis ID is an integer starting with 1, where 1 is the default chassis ID of the cluster formed by one chasis. If you are adding the first extender to a cluster with one chassis, the chassis_id of the extender should be set to 2. You should increment this chassis_id as you stack more chassis to the cluster. For example, the second extender’s chassis_id should be set to 3 before you connect it to a cluster of two chassis. This function updates the chassis id on all hosts, and hard resets the FortiAnalyzer-BigData system.

   Wait for the command to finish running without errors before you proceed with the next step.

3. Power off Blade A1 in the extender chassis from CMM.
4. Connect the 40GE links with QSFP between the Internal Switch Modules (Switch Module #1) of the extender and main chassis.
5. On the main chassis, access the Security Event Manager Controller and run the following command to make sure the new hosts have been added:

   fazbdctl show members

   There should be 13 additional hosts added as members. Wait until all the hosts' status shows as Alive

6. Access the FortiAnalyzer-BigData GUI of the main chassis, and go to Cluster Manager > Hosts.
7. Click Assign Role to assign the newly added hosts.

   New hosts should have a New label.

8. Wait for the Assign job to complete for all services to become healthy.
9. Follow the Found New recommended configurations notification on the Cluster Manager > Hosts view to apply the optimized configuration for the newly added hosts.
10. (Recommended) To add an extender chassis after scaling out, rebalance the data across the cluster. See How to rebalance the data.

To add a virtual machine instance:

1. Connect to the virtual appliance management services. For example, VMware vSphere client web GUI.
2. Launch a VM instance in the same internal and external networks with the same hardware specifications as other instances in the Cluster.

   See Installing FortiAnalyzer-BigData with VMware vSphere in the FortiAnalyzer-BigData Cluster Deployment on Virtual Machine (VM) guide for more information.

   All VM instances, including the Controller, require identical hardware specification in terms of CPU, RAM, and Disk size in a FortiAnalyzer-BigData cluster.

3. Monitor the status of the host from the web remote console. Wait until the host OS completes booting. This may take 5-10 minutes.

   After the host boots up and joins the cluster, it will appear in the GUI in Cluster Manager > Hosts. The new host will have a pending label.

4. In the GUI, go to Cluster Manager > Hosts.
5. Click Assign Role to assign the newly added hosts.
6. Wait for the Assign job to complete for all services to become healthy.
7. If it appears, follow the Found New recommended configurations notification on the Cluster Manager > Hosts view to apply the optimized configuration for the newly added hosts.
8. (Recommended) To add an extender chassis after scaling out, rebalance the data across the cluster. See How to rebalance the data.