How to modify the low disk space critical event email warning threshold from 5 GB to 10 GB free in RSA Authentication Manager 8.2.1 and higher

[#1]

Article Number

000036191

Applies To

RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.2, 8.2.1, 8.3
 

Issue

The RSA Authentication Manager 8.2 SP1 virtual appliance VMware template has a default 100 GB disk size configured in the deployment .ova file. Sites with thousands, or tens of thousands, of users that also store database backups on the local drive might want to be notified sooner when the disk drive is reaching capacity, but the Critical Event Notification value in the Security Console under Setup > System > Critical Event Notification has a hard-coded value of 5 GB for low free disk space when sending notifications..
 

Image description

 
This article explains how this value can be changed, so that the low disk space critical event email warning is triggered when 10 GB of free space is left instead of the default 5 GB free

Task

1. Access the PostgreSQL database as the database admin.
2. Modify the disk_space_check.free_space_threshold value in the ims_config_value table 

Resolution

Before continuing, access the primary's Operations Console and back up the database (Maintenance > Backup and Restore > Backup Now).

1. Access the primary Authentication Manager server via local console or SSH session.
2. Logon to the server with the rsaadmin operating system account.

login as: rsaadmin
Using keyboard-interactive authentication.
Password: <enter operating system password>
Last login: Tue Mar 27 10:53:48 2018 from jumphost.vcloud.local
RSA Authentication Manager Installation Directory: /opt/rsa/am
rsaadmin@am82p:~> cd /opt/rsa/am/utils
rsaadmin@am82p:/opt/rsa/am/utils> ./rsautil manage-secrets -a get com.rsa.db.dba.password

3. When prompted, enter the Operations Console admin user name and password.  This returns the database password.  On this primary the com.rsa.db.dba.password value is vDBh1Rb005S7nX9t304v8jy3eHFFGI but will be different in each deployment.   

Please enter OC Administrator username: <enter Operations Console administrator user name>
Please enter OC Administrator password: <enter Operations Console administrator password>
com.rsa.db.dba.password: vDBh1Rb005S7nX9t304v8jy3eHFFGI 

4. Connect to the PostgreSQL database with the command /opt/rsa/am/pgsql/bin/psql -h localhost -p 7050 -d db -U rsa_dba.
5. Enter the password for the rsa_dba user captured in step 3.  In the SSH console highlight the password value and and right click to paste.  The pasted value will not display.  Be sure  to only paste once.

rsaadmin@am82p:/opt/rsa/am/utils> /opt/rsa/am/pgsql/bin/psql -h localhost -p 7050 -d db -U rsa_dba
Password for user rsa_dba:  <paste in the com.rsa.db.dba.password captured above>               

6. If successful, you will get the db# prompt:

psql.bin (9.4.1)
SSL connection (protocol: TLSv1.2, cipher: ECDHE-RSA-AES256-SHA, bits: 256, compression: off)
Type "help" for help.

db=#

7. To see the disk space critical notification, check the interval and free space thresholds run the following SELECT statement from the db# SQL prompt.  There should be two rows of output.

db=# SELECT name, value FROM ims_config_value WHERE name LIKE '%ims.critical_notification.disk%';
                              name                               | value
---------------------------------------------------------------------------
ims.critical_notification.disk_space_check.free_space_threshold  | 5000
ims.critical_notification.disk_space_check.interval              | 15
(2 rows)

8. The disk is checked every 15 minutes.  The default threshold is 5,000 MB or about 5 GB.  To be sure you are going to change the correct setting, run a SELECT statement to get just the threshold, not the interval setting:

db=# SELECT name, value FROM ims_config_value WHERE name LIKE '%ims.critical_notification.disk_space_check.free%';
                              name                               | value
---------------------------------------------------------------------------
ims.critical_notification.disk_space_check.free_space_threshold  | 5000
(1 row)

9. Run the following UPDATE command to change the threshold:

db=# UPDATE ims_config_value SET VALUE = '10000' WHERE NAME LIKE '%ims.critical_notification.disk_space_check.free%';
UPDATE 1

10. Run the SELECT statement again to confirm the value change:

db=# SELECT name, value FROM ims_config_value WHERE name LIKE '%ims.critical_notification.disk_space_check.free%';
                              name                              | value 
--------------------------------------------------------------------------- 
ims.critical_notification.disk_space_check.free_space_threshold | 10000
(1 row)

Notes

10,000 MB will translate into 10,240,000 KB in the email.

Since the disk is checked every 15 minutes by default, you will not see the email immediately when the 10 GB threshold is reached, but within 15 minutes.