Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

After Upgrading to 6.1 /var/cb/data is Reaching 90% Capacity of the Disk

After Upgrading to 6.1 /var/cb/data is Reaching 90% Capacity of the Disk

Version

Cb Response 6.1.x

Issue

/var/cb/data reaching 90-92% of disk capacity up from 70% after upgrading to 6.x

Cause

There have been major changes to the purging mechanism in 6.x. The disk reaching a little over 90% is completely normal in 6.1. The default settings for MaxEventStoreSizeInPercent have increased from 70% from 5.x to 90% in 6.x since the event cores are handled differently and no longer require the additional space while merging segments and purging data.

Solution

If you feel uncomfortable with MaxEventStoreSizeInPercent set to 90 this setting be reduced, just bear in mind this will negatively affect your retention. This setting is located in /etc/cb/cb.conf. You can check here for more information:

Selecting an Event From the Alerts Page Results in a 404 Page

Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎07-17-2017
Views:
1066
Contributors