Article Number
000039945
Applies To
RSA Product Set: NetWitness Platform
RSA Product/Service Type: RSA NetWitness Platform
RSA Version/Condition: 11.5.0.0 and Later
Platform: CentOS
O/S Version: 6/7
Issue
Issue with ESA and Endpoint Log Hybrid disk partition utilization of /var/netwitness/mongo, /var/netwitness and /root paths.
Cause
Node X file system utilization fails if any of these /var/netwitness/mongo, /var/netwitness and /root paths storage is used more than 95% on either ESA or Endpoint Log Hybrid.
Resolution
Check the storage of /var/netwitness/mongo, /var/netwitness and /root paths on ESA and Endpoint Log Hybrid using the below command:
df-kh
If any of the paths storage exceeds more than 95%, you must free up the space by removing files or folders that are no longer required.