Summary
NetWitness has identified an issue with NetWitness Platform 11.6 or newer that can cause the database storage partition to fill up instead of rolling out older data when total used database storage space reaches 95% (the expected default behavior). This can occur on any core service which includes the archiver, broker, concentrator, network decoder, packet decoder, network hybrid, packet hybrid, log retention hybrid, and endpoint log hybrid.
Affect Platforms
NetWitness Platform 11.6.x and 11.7.x
Recommendation
The storage issue is being addressed in a Hot Fix/Version Update that is currently being created and tested by our Engineering department. Once it is available this advisory will be updated with how to retrieve the Hot Fix/Version Update along with how to apply it. To stay informed please check back regularly or subscribe to this article to receive email updates.
Maintain monitoring of the storage partitions by using the activated hardware policy within NetWitness’s Health & Wellness. This will help to notify you if a storage partition exceeds its default of 95%. If notifications have not been activated for your Health & Wellness, it is highly recommended that this is setup as soon as possible. Please see "Add an Email Notification" in the Manage Policies Page
We are sorry for any inconvenience this issue may cause. If you have any questions, please reach out to your account manager or NetWitness Support.
... View more