|Applies To||RSA Product/Service Type: Core Appliance|
RSA Version/Condition: 11.3.0
O/S Version: 7
|Issue||After upgrading from RSA NetWitness 11.x to 11.3.0 the /boot partition shows as being 100% full.|
|Cause||This issue is caused by older kernels not being removed once they are no longer useful. If the customer upgraded from 11.0 > 11.1 > 11.2 > 11.3.0 the total number of kernels will fill the /boot partition.|
|Resolution||To resolve this issue several of the older kernels will need to be removed. Any NetWitness Log & Network server can be affected by this issue. Please run the command below on any server that has the /boot partition full due to kernels. You may also run this command before installing 11.3.0 to help keep the /boot partition from filling once it installs the latest kernel.|
If the issue persists after running the commands above, please contact RSA Customer Support.
NOTE: This issue only affects RSA NetWitness 11.3.0. The issue will be fixed in 220.127.116.11 and above.