RSA Authentication Manager is displaying high disk space utilization. Upon investigation, the majority of the disk space is consumed under /var, while log files and directories under /opt/rsa/am are not the primary contributors.

Observable symptoms include:

• Disk usage reported as high or near full when running df -h
• Running sudo du -xhd1 / | sort -hr reveals that /var is consuming the most disk space (e.g., 75G)
• Docker system disk usage (docker system df) shows significant space consumed by images, containers, or volumes

Docker images and containers from a previously configured Embedded Identity Router continue to consume disk space under /var even after the Identity Router is no longer in use.

This commonly happens when the Embedded Identity Router was configured for testing or evaluation purposes and was later disabled or abandoned without being properly removed from the system. The Docker resources associated with it remain on disk and accumulate over time.

Running sudo du -sh * under /var/lib confirms that the docker directory is the primary consumer of disk space

1. Verify disk space utilization by running the following command:

   
   

   df -h

2. Identify the largest directories by running:

   
   

   sudo du -xhd1 / | sort -hr

   If /var is the largest consumer, proceed to the next step.

3. Drill into /var/lib to confirm Docker is the primary contributor:

   cd /var/lib
   sudo du -sh *

   Expected result: The docker directory shows significantly high disk usage (e.g., 150G).
   
   

4. Review Docker storage consumption in detail:

   docker system df

   This provides a summary of space consumed by Docker images, containers, volumes, and cache.
   
   

5. Verify whether the Embedded Identity Router is actively in use from the Security Console: Security Console > Home > Configure the Embedded Identity Router
   
   
   

6. If the Embedded Identity Router is no longer required, obtain customer approval before proceeding with removal.
   CAUTION: Ensure customer approval is obtained before deleting the Embedded Identity Router. This action cannot be undone.

    

7. Delete the unused Embedded Identity Router: Security Console > Home > Configure the Embedded Identity Router > Manage Identity Router > Delete Identity Router
   

   

    

   
   
   

8. Verify that disk space has been reclaimed by running:

   df -h

   A significant reduction in consumed disk space should be observed.

NOTE: If the database size is also large, consider deleting historical log records that are no longer required. Refer to Delete logs prior to a certain date from large database to reclaim disk space for RSA Authentication Manager for instructions.