2022-12-05 10:48 AM
HI,
Somebody please help to resolve the issue,
here some time partition get 100% full, in that time manually move the old data to another partition .
if that another partition also above 85%.
we proceed to delete some old file
when i try to delete some old file from that file i had given cmd like "rm -rf meta-0000080* /var/netwitness/concentrator/metadb -v"
it lead to delete all the meta data from that folder.
after that getting alarm "Concentrator meta rate Zero" it is in indexing state not cosuiming from data source.
error throw like "Dec 5 13:18:51 DCPacketHybrid01 NwDecoder[20875]: [Database] [info] System is deleting packet entries 16793090941320 to 16793101070786 for database file /var/netwitness/decoder/packetdb0/packetdb/packet-002031541.nwpdb (4.07 GB)"
please provide troubleshooting steps
2022-12-30 10:03 AM
I would check to see why SizeRoll isn't working or issue it manually.
On the services > decoder|concentrator > Explore > right click database > properties > pull down to sizeRoll
Input: type=packet maxPercent="95" > click Send
(change the type based upon what is full, e.g. meta, index, sessions)
Would also ensure that the scheduler has the sizeRoll in it to do this automatically.
https://community.netwitness.com/t5/netwitness-platform-online/rollover/ta-p/669231