ESM archive failure, low disk space
On the Archive Jobs page in Command Center the last several archives have failed saying "Not enough space available for archiving"
The storage group is only halfway full, and /opt/arcsight has several TB of space remaining. In the Storage config pages for ESM Command Center this is what I see:
Default Storage Group Current 1308GB Max 2210GB
Allocated Size 7368GB
Max Size 7373GB
System Storage Current 1TB Max 1.4TB
df -h output on the system:
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/rootvg-root 8.0G 2.8G 5.3G 35% /
devtmpfs 126G 0 126G 0% /dev
tmpfs 126G 8.0K 126G 1% /dev/shm
tmpfs 126G 1.3G 125G 1% /run
tmpfs 126G 0 126G 0% /sys/fs/cgroup
/dev/sda5 494M 123M 372M 25% /boot
/dev/mapper/rootvg-tmp 10G 56M 10G 1% /tmp
/dev/mapper/rootvg-home 494M 104M 391M 21% /home
/dev/mapper/rootvg-opt 10G 4.1G 5.9G 41% /opt
/dev/mapper/datavg-lv_arc 12T 4.5T 7.6T 38% /opt/arcsight
/dev/mapper/rootvg-lv_oem 2.9G 715M 2.1G 26% /opt/oem
tmpfs 26G 0 26G 0% /run/user/0
tmpfs 26G 0 26G 0% /run/user/1886
Am I missing something here?
There is a configuration option for the max disk space in the 'logger.properties'
Set/modify the following:
where X is the GB max allocation that you have in the default archive storage area. (Please restart services once chanegd)
Once you've modified this, you should be able to re-run the archive tasks from the CC
Let me know if you have any issues!