3 Replies Latest reply on Jan 16, 2015 12:14 PM by curtisi

    Check Logs/Data parition utilisation

    MathieuJM

      Hi,

      I have a customer with a 259G Logs/Data partition. for the time being 98% are used (238G).

      I like to kow what is consuming the space in this partition.

      Is there any command for this ?

      I have already type diskusage in appliance command.

      I have the following output:

      - LEM 37%

      - OS 40%

      - Logs/Data 98% <-- this is the annoying value

      - Temp 4%

       

      How to get some details about the logs/data utilization?

       

      Cheers

        • Re: Check Logs/Data parition utilisation
          curtisi

          In the Reports console, the Database Maintenance Report may shed some light on this.

           

          In the CMC console, go to APPLIANCE and run a DISKUSAGE.  That will also show some details.  I'm guessing you have syslog backing up, which could be handled with a couple more commands under the APPLIANCE menu in CMC.

           

          SETLOGROTATE --> Change to hourly

          LIMITSYSLOG --> Change to 24

            • Re: Check Logs/Data parition utilisation
              MathieuJM

              Here is the output of the diskusage command:

              cmc::acm# diskusage

              Checking Disk Usage (this could take a moment)... ....oo.oo.oo.oo.oo.oo.oo.

              Partition Disk Usage:

                      LEM:             37% (1.1G/3.0G)

                      OS:              40% (1.1G/3.0G)

                      Logs/Data:       98% (238G/259G)

                      Temp:             4% (179M/5.9G)

              Database Queue(s): 4.0K (No alerts queued, 408609 alerts waiting in memory)

              Rules Queue: 2.1M (0 alerts queued, 0 alerts waiting in memory)

              Console Queue: 2.1M (0 alerts queued, 0 alerts waiting in memory)

              DataCenter Queue: 2.1M (0 alerts queued, 0 alerts waiting in memory)

              EPIC Rules Queue: 2.1M (0 alerts queued, 0 alerts waiting in memory)

              Forensic Database Queue: 2.1M (0 data queued, 0 data items waiting in memory)

              Logs: 4.9G

              Tool Profiles Message Queue: 2.1M (0 alerts queued, 0 alerts waiting in memory)

               

               

              Hope this can help

                • Re: Check Logs/Data parition utilisation
                  curtisi

                  It looks like you have a lot of syslog traffic on the LEM.  Can you run a CHECKLOGS under the APPLIANCE menu and see what that returns?  What are the log file sizes?

                   

                  And you may want to run those commands I recommended before:

                   

                  SETLOGROTATE --> Change to hourly

                  LIMITSYSLOG --> Change to 24