000017670 - Disk Space issues on the DLP Network Appliances (all versions of DLP)

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000017670
Applies ToThese files are auto generated daily by a script that parses the /op/tablus/log/message* files on a daily basis. The report consists of condensed messages in the log files
RSA Data Loss Prevention (DLP)
IssueDisk Space issues on the DLP Network Appliances (all versions of DLP)
CauseIf the disk space issue is caused by large number and size of files located in the /home/tablus/analyzer directory,  named with format  yyyyy_mm_dd_hh:00:00.html (example 2014_06_09_01:00:001.html). These files can be removed or moved to another location.
Resolution

The max number of files that are kept can be modified by the following steps:   


 Logon the network appliance as the tablus account, at the menu select option 6 (advanced) then option 1 (exit to shell)           
1. Change directories to /opt/tablus/bin.
2. Make a copy of the dlpsupport_analyzer_job.sh file.
3. Edit the file and change MAXFILE=50 to 5.


In the /opt/tablus/sensor/log directory, move or delete files with the older messages-*.log files.    Note: On the controller the log location is the /opt/tablus/controller/log directory.
Legacy Article IDa67290

Attachments

    Outcomes