How to scale out

For FortiAnalyzer-BigData, you can scale out by adding more extender chassis. See To add an extender chassis:.

To add an extender chassis:

The following operation removes all user data from the extender chassis.

1. Ensure both the main and extender chassis are running the same and the latest version of FortiAnalyzer-BigData. To do this, run the following command:

   fazbdctl show version

   Do not connect the links between both chassis until step 2 has been successfully completed; otherwise, it may cause an IP conflict and corruption in the distributed consensus.

2. On the extender chassis, access the Security Event Manager Controller and run the following command:
   

   fazbdctl set appliance <chassis_id>

   For information about accessing the Security Event Manager Controller, see To connect to the Security Event Manager Controller:.

   The chassis ID is an integer starting with 1, where 1 is the default chassis ID of the cluster formed by one chassis. If you are adding the first extender to a cluster with one chassis, the chassis_id of the extender should be set to 2. You should increment this chassis_id as you stack more chassis to the cluster. For example, the second extender’s chassis_id should be set to 3 before you connect it to a cluster of two chassis. This function updates the chassis id on all hosts, and hard resets the FortiAnalyzer-BigData system.

   Wait for the command to finish running without errors before you proceed with the next step.

3. Connect the 40GE links with QSFP between the Internal Switch Modules (Switch Module #1) of the extender and main chassis.
4. On the main chassis, access the Security Event Manager Controller and run the following command to make sure the new hosts have been added:

   fazbdctl show members

   There should be 13 additional hosts added as members. Wait until all the hosts' status shows as Alive

5. Access the FortiAnalyzer-BigData GUI of the main chassis, and go to Cluster Manager > Hosts.
6. Click Assign Role to assign the newly added hosts.

   New hosts should have a New label.

7. Wait for the Assign job to complete for all services to become healthy.
8. Follow the Found New recommended configurations notification on the Cluster Manager > Hosts view to apply the optimized configuration for the newly added hosts.
9. (Recommended) To add an extender chassis after scaling out, rebalance the data across the cluster. See How to rebalance the data.