/var/netwitness/broker partition was with 100% used space.

[Paulo_FreitasJr]

Hello, team.

Today I came across the following situation where Broker stopped working.
When accessing via SSH I noticed that the /var/netwitness/broker partition was with 100% used space.
In the /broker directory, I saw that there are several files named "core.number".  And these vary in size from 1.5 to 2GB maximum.
I did a search in the community and for logs that could bring me the causes of this stop but I found nothing.

 

Thanks in advance for your attention.

[EricaChalfin]

Paulo Francisco‌,

I've moved your question to the RSA NetWitness Platform" data-type="space space where it will be seen by the product's support engineers, other customers and partners.  Please bookmark this page and use it when you have product-specific questions.

Alternatively, from the RSA Customer Support page, click on Ask A Question on the blue navigation bar and choose Ask A Product Related Question.  From there, scroll to RSA NetWitness Platform" data-type="space‌‌ and click Ask A Question.  That way your question will appear in the correct space.

Regards,

Erica

[JohnSnider]

delete all the core.* files, except the latest one, then open a case with support and they can set up a  way for you to send the core file to them for analysis. (may have to zip it and break it up into multiple files)