RabbitMQ Message Broker Alert

[AlexeyFedorov]

Hello,

We have alert "Critical Filesystem Usage on Rabbitmq Message Broker" into Health & Wellness tab. Since RabbitMQ directory was moved from /var/lib/rabbitmq to /var/netwitness/rabbitmq on 11 version how we can manage our disk space (/var/netwitness)? The RabbitMQ service will stopped when reach 80% and we can't collect data up to 95% of the full space of /var/netwitness. Is it proper way to fix it?

[RenatoGoncalves]

Hello Alexey,

I believe that removing files from the rabbitmq directory solves the problem....

But im facing the same issue as i dont now which files can be deleted, i have an erl_crash.dump which is taking a lot of space....and i dont know if i can erase it

[AlexeyFedorov]

Hello Renato,

No, deleting the erl_crash.dump has no influence to result.

The problem looks more complicated how I think. If you will try to install (fresh install 11.x version) LogHybrid or PacketHybrid you will see that Decoder and Concentrator used the same partitions (on 10.6 and ealry it was different partitions). On that reason logs/packet collecting stops when free space is exceed (if no perform partition tuning). I guess that the problem is not correct partition creation during installation process (it is developers issue).

Support is suggested to use different partition for different services like was at previous version (You need to create it yourself, it is not into pattern of OVA files). All of this said me that RSA made serious issue for fresh install 11 version. I don't know has it influence to update from 10.6 to 11, but for fresh install it is serious mistake.

This is has direct influence to the topic.