Add Additional Space for Large Reports

To add additional disk space to the Reporting Engine for large reports, follow the below steps. If large compliance reports have to be generated for Warehouse, the Reporting Engine disk space might get consumed quicker than expected. In such cases, you can mount any external storage such as SAN or NAS for storing reports.

The directories that tend to fill up disk space are resultstore and formattedReports under the Reporting Engine home directory. It is recommended to move only these two directories to SAN or NAS and replace the original locations with soft links pointing to the new locations. It is also recommended to leave the remaining directories in the local disk itself for reliable and high I/O performance.

Note: The following steps assume that the Reporting Engine home directory is located at /var/netwitness/re-server/rsa/soc/reporting-engine/ and the external storage is mounted under /externalStorage/. Also, the ‘rsasoc’ user must have read-write access to the specified external storage path.

To move disk space for the Reporting Engine to external storage:

  1. Stop Reporting Engine service as a root user.

    service rsasoc_re stop

  2. Switch to rsasoc user.

    su rsasoc

  3. Change to RE home directory.

    cd /var/netwitness/re-server/rsa/soc/reporting-engine/

  4. Move the resultstore directory to a mounted external storage. Type the following command and press ENTER:

    mv resultstore /externalStorage​

  5. Move the formatted Reports directory to a mounted external storage. Type the following command and press ENTER:

    mv formattedReports /externalStorage

  6. Create a soft link for resultstore. Type the following command and press ENTER:​

    ln -s /externalStorage/resultstore /var/netwitness/re-server/rsa/soc/reporting-engine/resultstore

  7. Create a softlink for formattedReports. Type the following command and press ENTER:

    ln -s /externalStorage/formattedReports /var/netwitness/re-server/rsa/soc/reporting-engine/formattedReports

  8. Exit the rsasoc user.

    exit

  9. Start Reporting Engine service as a root user.

    service rsasoc_re start

    Note: If the external storage is offline, you cannot perform the following tasks:
    1) Execute Reports or Reporting Alerts
    2) View existing Reports or Reporting Alerts
    However, you can create new Reporting objects such as Reports and Charts, and access Charts and Live Dashboard created for charts. Therefore, you must ensure that the external storage is reliable and has the required space.

    Additionally, if you want to store reports beyond 100 days, change the retention configuration appropriately for the service that you are using as a data source.