RSA Netwitness and cleaning files with systemd-tmpfiles

[roman80]

Hi,

We are using RSA Netwitness on our RHEL8 servers.

We current have problems with that /tmp is getting full.

We try to use systemd-tmpfiles to clean /tmp that are older than x days, but systemd-tmpfiles fails to clean out files due to that RSA Netwitness has updated the files atime.

Anyone knows if there is any solution for this problem.

Best regards,

Roman

[JohnKisner]

Hello roman80,

Please note that NetWitness is not tested or suggested that it be ran on CentOS 8. How you got it installed when the software is on a CentOS 7 image opens up other questions as well. Under normal circumstances the /tmp folder should not fill to capacity when using a standard NetWitness image. How large is your /tmp folder? Do you have any non-NetWitness items writing to the /tmp folder? Do not manually remove NetWitness related temp files unless specifically requested by NetWitness Support as this can cause your NetWitness instance to not work as expected.