System

Update cluster configuration

The amount of time any GFS participant may remain in a SUSPECTED operational state before that state automatically transitioned to DOWN. May be formatted as 10seconds, 1minute, "1 hour 30 minutes", etc. When no units are specified, minutes are assumed

Display this help and exit

Determines whether online license activation is allowed. Allowed values:[YES, NO]

Disable Prometheus exporters

Enable Prometheus exporters

The URL of the HTTP proxy server (in the form http://a.b.c.d:pp)

Clear the HTTP proxy server configuration

An X.509 certificate, with an optional CA chain, in certificate PEM format that identifies the management server to the client

Reset the server to use an internally-generated self-signed certificate

An unencrypted RSA private key in PKCS#1 or PKCS#8 PEM format that is paired with the server certificate in the server-certificate-chain bundle

Specifies the timezone

View the cluster configuration

Configure DNS

Skip validation of new DNS server configuration

Display this help and exit

Set DNS server(s)

Clear DNS servers

View the DNS configuration

Update data portal

The data portal UUID. Required unless any of the following is specified: --data-portal-type, --node-name

The data portal type. Required unless any of the following is specified: --data-portal-id, --node-name Possible values: SMB | NFS_V3 | NFS_V4_1 | S3.

Set the data portal admin state to DOWN

Set the data portal admin state to UP

Display this help and exit

The node name. Required unless any of the following is specified: --data-portal-type, --data-portal-id

Add an SMTP gateway which will be used for events and call home through a mail server

Disable SMTP email

Enable SMTP email

Source email address from which the events will be sent

Display this help and exit

SMTP host

Disable SSL secured connection

SMTP password

SMTP port

Enable SSL secured connection

SMTP username

View current configuration

List events generated by the system

Include only cleared events

List events after "from-date", in the format [yyyy-MM-dd|dd-MMM-yyyy] [HH:mm:ss]

Print extra information for each element

Display this help and exit

The ID of the event to list

The number of last-emitted events to list

List all events with severity greater than the given severity. Possible values: DEBUG | INFORMATIONAL | NOTICE | WARNING | ERROR | CRITICAL | ALERT | EMERGENCY.

List all events of a given type.

Include only uncleared events

List events before "until-date", in the format [yyyy-MM-dd|dd-MMM-yyyy] [HH:mm:ss]

Clear events generated by the system

Clear all events. Required unless any of the following is specified: --type, --created-before, --created-after, --id

Clear events (Required)

Clear events after "created-after", in the format [yyyy-MM-dd|dd-MMM-yyyy] [HH:mm:ss]. Required unless any of the following is specified: --type, --all, --created-before, --id

Clear events before "created-before", in the format [yyyy-MM-dd|dd-MMM-yyyy] [HH:mm:ss]. Required unless any of the following is specified: --type, --all, --created-after, --id

Display this help and exit

The ID of the event to clear. Required unless any of the following is specified: --type, --all, --created-before, --created-after

Clear all events of a given type. Required unless any of the following is specified: --all, --created-before, --created-after, --id

List the configured heartbeats

Display this help and exit

Sends the specified heartbeat type to support

Display this help and exit

The ID of the heartbeat to send. Required unless any of the following is specified: --type, --name

The name of the heartbeat to send. Required unless any of the following is specified: --type, --id

The type of the heartbeat to send. Required unless any of the following is specified: --name, --id Possible values: HEALTH | CAPACITY.

Update the heartbeat configuration

Disables periodic heartbeat sending. Required unless any of the following is specified: --enable, --interval

Enables periodic heartbeat sending. Required unless any of the following is specified: --disable, --interval

Display this help and exit

The ID of the heartbeat configuration to be updated. Required unless any of the following is specified: --type, --name

Periodic heartbeat sending interval (default units: seconds, otherwise specify units, e.g. "5 minutes"). Required unless any of the following is specified: --enable, --disable

The name of the heartbeat configuration to be updated. Required unless any of the following is specified: --type, --id

The type of the heartbeat configuration to be updated. Required unless any of the following is specified: --name, --id Possible values: HEALTH | CAPACITY.

Map a federated user’s group to an internal Role. For example, map the members of a particular Active Directory group to the admin Role

Name of the group to map to the internal role (Required)

Display this help and exit

The ID of an internal role. Required unless any of the following is specified: --role-name, --mgmt-role-name, --role-id

The name of an internal role. Required unless any of the following is specified: --role-name, --mgmt-role-id, --role-id

A name for the group to role mapping. If missing, group::role is used. (Required)

Delete an identity group mapping

Display this help and exit

The ID of the identity group mapping to delete. Required unless "--name" is specified

The name of the identity group mapping to delete. Required unless "--id" is specified

List the identity group mappings

Print extra information for each element

Display this help and exit

List a specific identity group mapping by ID

List a specific identity group mapping by name

Update an identity group mapping

The name of a new identity group to associate with the role

Display this help and exit

The ID of the identity group mapping to update. Required unless "--name" is specified

The ID the role to associate with the identity group

The name the role to associate with the identity group

The name of the identity group mapping to update. Required unless "--id" is specified

Add an Identity Provider (IdP) such as Active Directory for purposes of federated authentication and authorization. See also the identity-group-mapping commands

The amount of time to wait for the system to connect to the IdP. May be formatted as 10seconds, 1minute, "1 hour 30 minutes", etc. When no units are specified, seconds are assumed

The name of an IdP domain. When adding an AD IdP, this specifies the AD domain (Required)

Instructs the system to follow referrals when resolving usernames. Typically, only required when there are cross-domain memberships

Display this help and exit

The name of this IdP (Required)

The amount of time to wait for the system to read from the IdP. May be formatted as 10seconds, 1minute, "1 hour 30 minutes", etc. When no units are specified, seconds are assumed

A comma-separated list of fully-qualified domain names or IP addresses. The list may not contain spaces (Required)

A comma-separated list of fully-qualified domain names or IP addresses. The list may not contain spaces. To use a non-standard port, append it to a server entry, for example dc1.example.com:636

The type of IdP being added. Possible values: AD.

List the federated Identity Providers (IdPs)

Print extra information for each element

Display this help and exit

List a specific IdP by ID

List a specific IdP by name

Remove a federated Identity Provider (IdP)

Display this help and exit

The ID of the IdP to remove. Required unless "--name" is specified

The name of the IdP to remove. Required unless "--id" is specified

Update a federated Identity Provider (IdP)

The amount of time to wait for the system to connect to the IdP. May be formatted as 10seconds, 1minute, "1 hour 30 minutes", etc. When no units are specified, seconds are assumed

A domain name

Instructs the system to follow referrals when resolving usernames. Typically, only required when there are cross-domain memberships

Display this help and exit

The ID of the IdP to update. Required unless "--name" is specified

Instructs the system to not follow referrals when resolving usernames

The name of the IdP to update. Required unless "--id" is specified

The amount of time to wait for the system to read from the IdP. May be formatted as 10seconds, 1minute, "1 hour 30 minutes", etc. When no units are specified, seconds are assumed

A comma-separated list of fully-qualified domain names or IP addresses. The list may not contain spaces

Add a key management system (KMS)

Authentication username (* required for AWS_KMS)

An X.509 certificate in certificate PEM format that identifies the client to the server (* required for NCIPHER_WSOP)

An RSA private key in PKCS#1 or PKCS#8 PEM format that is paired with the client-certificate (* required for NCIPHER_WSOP)

Any comment to be associated with the KMS

The endpoint (URI or host:port) of the KMS (* required for and exclusive to NCIPHER_WSOP)

Display this help and exit

The key identifier to use with the KMS (* required for AWS_KMS and NCIPHER_WSOP)

A name for the KMS (Required)

The passphrase (* required for and exclusive to PASSPHRASE). If not specified, it will be prompted for.

Authentication password (* required for AWS_KMS)

An X.509 certificate, with optional CA chain, in certificate PEM format that identifies the KMS server to the client (* required for and exclusive to NCIPHER_WSOP)

The type of KMS system being added. Possible values: NCIPHER_WSOP | AWS_KMS | PASSPHRASE. (Required)

List the key management systems (KMS)s

Print extra information for each element

Display this help and exit

The ID of the KMS to list

The internal ID of the KMS to list

The name of the KMS to list

Remove a key management system

Force the removal of a KMS, even if object storage volumes exist

Display this help and exit

The ID of the KMS to remove. Required unless any of the following is specified: --internal-id, --name

The internal ID of the KMS to remove. Required unless any of the following is specified: --name, --id

The name of the KMS to remove. Required unless any of the following is specified: --internal-id, --id

Update a key management system (KMS)

Authentication username (exclusive to AWS_KMS)

Prompt for a new passphrase for the PASSPHRASE KMS

An X.509 certificate in Base64-encoded PEM format (with the BEGIN and END tags) that identifies the client to the server (exclusive to NCIPHER_WSOP)

An RSA private key in Base64-encoded PEM format (with the BEGIN and END tags) that is paired with the client-certificate (exclusive to NCIPHER_WSOP)

Any comment to be associated with the KMS

The endpoint (URI or host:port) of the NCIPHER_WSOP KMS

Display this help and exit

The ID of the KMS to update. Required unless any of the following is specified: --internal-id, --name

The internal ID of the KMS to update. Required unless any of the following is specified: --name, --id

The key identifier to use with the KMS

The name of the KMS to update. Required unless any of the following is specified: --internal-id, --id

A new name for the KMS

A new passphrase for the PASSPHRASE KMS

Authentication password (exclusive to AWS_KMS)

An X.509 certificate with optional CA chain in Base64-encoded PEM format (with the BEGIN and END tags) that identifies the NCIPHER_WSOP KMS server to the client

Update information for the local site.

The name of the data center location of the site

Clears the data center location

Alternate specification of the location in <latitude>,<longitude> format

Clears both the latitude and longitude

Display this help and exit

The latitude (-90.0 to 90.0) of the site

Clears the latitude

The longitude (-180.0 to 180.0) of the site

Clears the longitude

The new name of the local site

An address which overrides the site’s data address. When specified, this address will be used as the effective data address advertised to other sites. When not specified, the cluster’s data address will be used as the effective address

Clears the override-data-address

An address which overrides the site’s mgmt address. When specified, this address will be used as the effective mgmt address advertised to other sites. When not specified, the cluster’s mgmt address will be used as the effective address

Clears the override-mgmt-address

Alternate specification of the location in Plus Code format

View the local site

Add and activate a license

The license activation ID

Causes the command to be executed asynchronously. A reference task identifier will be returned

Number of 1TB units of storage capacity to allocate to this license. Only applicable with capacity-based licenses

Display this help and exit

A management IP of a metered license server

The password for the user named by the license-server-username parameter

A user who has administrative rights on the metered license server

When running a task-based command synchronously, monitor for task completion indefinitely

The type of license to add. Possible values: NODE | FILE_CAPACITY | OBJECT_CAPACITY | METERED. (Required)

List all licenses

The activation ID of the license to list

Display this help and exit

Add and activate a license via an offline process. A request file is generated and obtained via one of the export parameters. The request file is then exchanged for a response file by the license administrator or at the license portal. The response file is then uploaded to complete the process.

The license activation ID (Required)

Number of 1TB units of storage capacity to allocate to this license. Only applicable with capacity-based licenses

Causes an activation request to be copied to an ftp, scp, or mailto location. Examples: ftp://example.com/uploads, scp://example.com/uploads, mailTo:john.doe@example.com. Required unless "--import-uri" is specified

Display this help and exit

The location of the activation response file to be uploaded which will complete the offline license add process. Examples: ftp://example.com/uploads/capabilityResponse.bin, scp://example.com/uploads/capabilityResponse.bin. Required unless any of the following is specified: --export-uri, --type

The type of license to add. Required unless "--import-uri" is specified. Possible values: NODE | FILE_CAPACITY | OBJECT_CAPACITY.

Cancel a pending offline license operation for a given activation ID. If the initial request has already been uploaded to the license server, use the appropriate license-offline command to complete the operation.

The license activation ID associated with the pending offline request (Required)

Display this help and exit

Deactivate and remove a license via an offline process. A request file is generated and obtained via one of the export parameters. The request file is then exchanged for a response file by the license administrator or at the license portal. The response file is then uploaded to complete the update process.

The license activation ID (Required)

Causes a remove request file to be copied to an ftp, scp, or mailto location. Examples: ftp://example.com/uploads, scp://example.com/uploads, mailTo:john.doe@example.com. Required unless "--import-uri" is specified

Display this help and exit

The location of the activation response file to be uploaded which will complete the offline license add process. Examples: ftp://example.com/uploads/capabilityResponse.bin, scp://example.com/uploads/capabilityResponse.bin. Required unless "--export-uri" is specified

Update the allocated capacity for a capacity-based license via an offline process. A request file is generated and obtained via one of the export parameters. The request file is then exchanged for a response file by the license administrator or at the license portal. The response file is then uploaded to complete the update process.

The license activation ID (Required)

New number of 1TB units of storage capacity to allocate to this license

Causes an update request file to be copied to an ftp, scp, or mailto location. Examples: ftp://example.com/uploads, scp://example.com/uploads, mailTo:john.doe@example.com. Required unless "--import-uri" is specified

Display this help and exit

The location of the activation response file to be uploaded which will complete the offline license add process. Examples: ftp://example.com/uploads/capabilityResponse.bin, scp://example.com/uploads/capabilityResponse.bin. Required unless "--export-uri" is specified

Deactivate and remove a license

The license activation ID (Required)

Causes the command to be executed asynchronously. A reference task identifier will be returned

When license-remove is invoked from the licensed client, the presence of the force parameter will cause the license to be removed from the client even if the license server can not be reached. When invoked from the license server, the force parameter is required and will cause the license server’s record of the license to be deleted.

Display this help and exit

When running a task-based command synchronously, monitor for task completion indefinitely

Update the allocated capacity for a capacity-based license

The license activation ID (Required)

Causes the command to be executed asynchronously. A reference task identifier will be returned

New number of 1TB units of storage capacity to allocate to this license

Display this help and exit

For a metered license, update the IP of server to which usage reporting is sent. The IP must identity the license server which originally granted the client license.

When running a task-based command synchronously, monitor for task completion indefinitely

List metrics

Field names in the format: <table-name>.<column-name> (e.g., network.bytesSent) (Required)

Shows metrics after date "from-date" (default: now - 1h)

Computational aggregate function. Possible values: MIN | MAX | MEAN | MEDIAN.

Time grouping interval. For example, 60s (seconds), 60m (minutes), 24h (hours), 7d (days), 52w (weeks)

Display this help and exit

Total number of samples per column (default: 1000)

Name criteria on the metrics

Object type criteria on the metrics

Shows metrics before date "until-date"

Shows metrics on an object with the specified UUID

Configure NIS servers

Disable NIS service, clear NIS servers

Enable NIS service

Display this help and exit

NIS servers configuration in the form domain:server, example: --servers somedomain.local:192.168.3.17. This parameter may be repeated.

View NIS configuration

Create a notification rule

Notification format. Possible values: PLAIN | XML. (Required)

Display this help and exit

Rule name (Required)

Severity threshold. Possible values: DEBUG | INFORMATIONAL | NOTICE | WARNING | ERROR | CRITICAL | ALERT | EMERGENCY. (Required)

Destination users (each must have an email address)

List notification rules

Print extra information for each element

Display this help and exit

Notification rule identifier

Notification rule name

Remove a notification rule

Display this help and exit

Notification rule identifier. Required unless "--name" is specified

Notification rule name. Required unless "--id" is specified

Update a notification rule

Display this help and exit

Notification rule identifier. Required unless "--name" is specified

Notification rule name. Required unless "--id" is specified

New notification format. Required unless any of the following is specified: --new-threshold, --new-name Possible values: PLAIN | XML.

New name. Required unless any of the following is specified: --new-format, --new-threshold

New severity threshold. Required unless any of the following is specified: --new-format, --new-name Possible values: DEBUG | INFORMATIONAL | NOTICE | WARNING | ERROR | CRITICAL | ALERT | EMERGENCY.

Configure NTP

Display this help and exit

Comma-separated list of NTP server hostnames or IP addresses.

Clear all NTP servers

View NTP configuration

Collect logs and information from all nodes

Collect from all available nodes. Required unless any of the following is specified: --current, --push, --node

Causes the command to be executed asynchronously. A reference task identifier will be returned

Collect from current node. For push requests, use this option to send only the current node. Required unless any of the following is specified: --all, --push, --node

Display this help and exit

Collect locally

When running a task-based command synchronously, monitor for task completion indefinitely

Collect from specific node. Required unless any of the following is specified: --current, --all, --push

Collect and push to Support Center. Defaults to all nodes unless --current, --all, or --node is specified. Required unless any of the following is specified: --current, --all, --node

Add a remote site

Display this help and exit

The management address of the remote site (Required)

Automatically trust the remote site’s client certificate

Discover a remote site and, optionally, synchronize data on the local instance of the remote site

Display this help and exit

The management address (IP or DNS) of the remote site (Required)

Synchronize data on the local site instance with discovered remote values

List known remote sites

Print extra information for each element

Display this help and exit

The ID of the site to be listed

The internal ID of the site to be listed

The name of the site to be listed

Remove a remote site. Note that if the site is sharing an object volume with this site, it will automatically be re-added

Display this help and exit

The ID of the site to be removed. Required unless any of the following is specified: --internal-id, --name

The internal ID of the site to be removed. Required unless any of the following is specified: --name, --id

The name of the site to be removed. Required unless any of the following is specified: --internal-id, --id

Update a remote site. Use this to override the management and data address when configuring a Global File System. Overriding addresses is commonly used when network topologies are using NAT.

Display this help and exit

The ID of the site to be updated. Required unless any of the following is specified: --internal-id, --name

The internal ID of the site to be updated. Required unless any of the following is specified: --name, --id

The remote site’s name. Required unless any of the following is specified: --internal-id, --id

Do not automatically trust the remote site’s client certificate

An address which overrides the remote site’s data address. When specified, this will be the effective data address used to communicate with the remote site

Clears the override-data-address

An address which overrides the remote site’s mgmt address. When specified, this will be the effective mgmt address used to communicate with the remote site

Clears the override-mgmt-address

Automatically trust the remote site’s client certificate

Create a schedule

Expression values follow cron syntax where:
',' Commas separate lists
'-' Hyphens define ranges
'*' Wildcard matches all cases
'/' Slashes define step values i.e. */5 = every 5 minutes

To create a schedule at 1:30 AM, 12:30 PM and 6:30 PM, Monday-Friday

The day of month for schedule. Allowed values are: 1-31,-*/ (default value: *)

The day of week for schedule. Allowed values are: 1-7,SUN-SAT-*/ (default value: *)

Display this help and exit

The hour for schedule. Allowed values are: 0-23,-*/ (default value: *)

The minute for schedule. Allowed values are: 0-59,-*/ (default value: *)

The month for schedule. Allowed values are: 1-12,-*/ (default value: *)

The name of the schedule (Required)

Delete a schedule

Display this help and exit

The ID of the schedule to delete. Required unless "--name" is specified

The name of the schedule to delete. Required unless "--id" is specified

List schedules

Print extra information for each element

Display this help and exit

The ID of the schedule to list

The name of the schedule to list

Update a schedule

Expression values follow cron syntax where:
',' Commas separate lists
'-' Hyphens define ranges
'*' Wildcard matches all cases
'/' Slashes define step values i.e. */5 = every 5 minutes

To update a schedule to 1:30 AM, 12:30 PM and 6:30 PM, Monday-Friday

The day of month for schedule. Allowed values are: 1-31,-*/ (default value: *)

The day of week for schedule. Allowed values are: 1-7,SUN-SAT-*/ (default value: *)

Display this help and exit

The hour for schedule. Allowed values are: 0-23,-*/ (default value: *)

ID to identify the schedule. Required unless "--name" is specified

The minute for schedule. Allowed values are: 0-59,-*/ (default value: *)

The month for schedule. Allowed values are: 1-12,-*/ (default value: *)

Name to identify the schedule. Required unless "--id" is specified

Configure SNMP service

The textual identification of the contact person for this managed node, together with information on how to contact this person

A textual description of the entity

SNMP trap destination configuration. A 3-tuple including <IP>,<version>,<community>. For example: 172.31.12.216,V2C,public

Disable SNMP service. Required unless any of the following is specified: --enable, --view

Enable SNMP service. Required unless any of the following is specified: --disable, --view

Display this help and exit

The physical location of this node

SNMP manager configuration. A 3-tuple including <subnet>,<version>,<community>. For example: 172.31.0.0/16,V2C,public

An administratively-assigned name for this managed node

View SNMP configuration. Required unless any of the following is specified: --enable, --disable

Apply software version

Update all nodes, mutually exclusive with "--node-name". Required unless "--node-name" is specified

Display this help and exit

Node name, mutually exclusive with "--all". Required unless "--all" is specified

Version (Required)

List software versions

Print extra information for each element

Display this help and exit

Delete software update packages

Display this help and exit

Package name to delete (Required)

Cancel software update task

Display this help and exit

Task ID (Required)

Monitor update status

Print extra information for each element

Display this help and exit

The number of last-started software updates to list

Update task id

Upload a software package with UPD format

Display this help and exit

The path to the UPD software package (Required)

Configure syslog servers

Disable syslog event forwarding, clear syslog configuration. Required unless any of the following is specified: --enable, --view

Enable syslog event forwarding. Required unless any of the following is specified: --disable, --view

Display this help and exit

Syslog server configuration. A 3 or 4-tuple including <server>,<port>,<transport>,[<message types delimited by |>].
Server may be an IP address or a hostname (requires DNS).
Transport values may be tcp, udp, or relp.
Message types may be event and/or filesystem. When the relp transport is specified, only filesystem is allowed.
'event' causes system events to be forwarded to the remote syslog server.
'filesystem' causes filesystem access audit records to be forwarded.
When both are present, they are separated by a |.
The message type defaults to event|filesystem for udp and tcp, and filesystem for relp.
The entire --server param can be used multiple times.

View syslog configuration. Required unless any of the following is specified: --enable, --disable

Configure product configuration and metadata backups. Optionally create a backup now

Causes the command to be executed asynchronously. A reference task identifier will be returned

Display this help and exit

IP address of the backup volume

When running a task-based command synchronously, monitor for task completion indefinitely

Create an immediate system backup of configuration and metadata (--ip and --path parameters are required if specified). Required unless any of the following is specified: --schedule-remove, --schedule-name, --view

The NFS export path to the backup volume

Name for the periodic backup schedule. Required unless any of the following is specified: --now, --schedule-remove, --view

Remove the scheduled backup configuration. Required unless any of the following is specified: --now, --schedule-name, --view

View the system backup configuration. Required unless any of the following is specified: --now, --schedule-remove, --schedule-name

List the names of the product configuration and metadata backups in the backup volume

Display this help and exit

IP address of the backup volume (Required)

The NFS export path to the backup volume (Required)

Restore product configuration and metadata backup

Causes the command to be executed asynchronously. A reference task identifier will be returned

The name of the backup. If not specified, the most recent backup is restored

The UUID of the cluster that created the backup from which you would like to restore

Display this help and exit

IP address of the backup volume (Required)

When running a task-based command synchronously, monitor for task completion indefinitely

The NFS export path to the backup volume (Required)

Use this command to cleanly shut down all product nodes.

Confirm shutdown execution (Required)

Display this help and exit

Shutdown reason

Show an overview of the system

Display this help and exit

A timeout in seconds to use when executing the command

Attempt to cancel a task. If the task is HALTED, it will be restarted and the new task will be cancelled.

Display this help and exit

The task ID

List all running tasks in the system. The command can also be used to list completed tasks using the status filter, showing both successful and failed tasks. When no time-based filter is specified, tasks created over the past 31 days are returned.

List tasks that were created at or after (>=) the specified time, in the format [yyyy-MM-dd|dd-MMM-yyyy] [HH:mm:ss]

List tasks that were created before (<) the specified time, in the format [yyyy-MM-dd|dd-MMM-yyyy] [HH:mm:ss]

List tasks that ended at or after (>=) the specified time, in the format [yyyy-MM-dd|dd-MMM-yyyy] [HH:mm:ss]

List tasks that ended before (<) the specified time, in the format [yyyy-MM-dd|dd-MMM-yyyy] [HH:mm:ss]

Print extra information for each element

Display this help and exit

The task ID

The number of last-created tasks to list

The task name

List tasks that started at or after (>=) the specified time, in the format [yyyy-MM-dd|dd-MMM-yyyy] [HH:mm:ss]

List tasks that started before (<) the specified time, in the format [yyyy-MM-dd|dd-MMM-yyyy] [HH:mm:ss]

Filter by the status of the task. Possible values: NONE | QUEUED | VALIDATING | VALIDATED | VALIDATION_FAILED | EXECUTING | CANCELLING | HALTED | RECOVERING | RESUMED | FAILED | CANCELLED | COMPLETED.

Resume a task that is HALTED, or retry a task that is FAILED

Display this help and exit

The task ID