Imperva Cyber Community

communities_1.jpg
 View Only
  • 1.  Free space on partition /var on MX is running low

    Posted 04-27-2021 04:07
    Edited by Chintan Myakal 04-27-2021 04:14
    Hi,

    Last night I received an alert received in my inbox as  -

    Free space on partition /var on MX is running low subsystem : /var 

    I could recognise there are archive files in /var/tmp folders and I deleted a lot of them. But, still I can see those files in /tmp directory, and the /var usage is still same.

    Can anyone help me understand this ?

    Regards
    #On-PremisesWAF(formerlySecuresphere)

    ------------------------------
    Chintan Myakal
    Sr.Cybersecurity Analyst
    Mumbai
    ------------------------------


  • 2.  RE: Free space on partition /var on MX is running low
    Best Answer

    Posted 04-27-2021 07:09
    Hi Chintan,

    This link should help... Imperva Documentation Portal

    Gateway

    1. Delete unused large files
      • Mainly old logs (ex. ​/opt/SecureSphere/etc/logs/GatewayLog/GatewayLog_[date].html )
      • Crash files in /var/crash/imperva/
      • Upgrade files in /var/securesphere/upgrades/ – purge old upgrade directories
    2. On VMs, Increase disk size
    3. In DAM, refine "Audit archive" & purge settings to act more frequently

      Let me know if this answers your question.

      Thanks,


    1. 3.  RE: Free space on partition /var on MX is running low

      Posted 05-05-2021 02:34
      @Ira Miga ,

      Can I delete all the files mentioned by Gerard ? Can you confirm once

      Regards​

      ------------------------------
      Chintan Myakal
      Sr.Cybersecurity Analyst
      Mumbai
      ------------------------------



    2. 4.  RE: Free space on partition /var on MX is running low

      Posted 05-05-2021 08:00
      Hi @Chintan Myakal,

      Yes, these files can be safely deleted to free the space.
      Best,​​

      ------------------------------
      Ira Miga
      Imperva
      Knowledge Engineer
      ------------------------------



    3. 5.  RE: Free space on partition /var on MX is running low

      Posted 12-19-2023 22:42

      Hi,

      I had the same issue but this time its the /var/boot folder which i cannot do an upgrade to v14.7.0.50 from 14.6 (EOL). 

      Any suggestion on what other logs to check or a script to determine those folders that are consuming the disk space?

      Thank you.

      Angfe



      ------------------------------
      [Leangf]
      ------------------------------



    4. 6.  RE: Free space on partition /var on MX is running low

      Posted 12-20-2023 02:06
      Edited by Cezmi Cal 12-20-2023 02:12

      Hi Angfe,

      Are you sure about the folder path? There should be /boot path not /var/boot path.

      Then, if you have space problem for /boot partition, you can follow the instructions detailed here -> How to Free Up Space in /boot on CentOS Server | DigitalOcean. Before purging old kernels, do not forget to take snapshot if it is a VM.

      ------------------------------
      Cezmi Cal
      technical support engineer
      Barikat Internet Guvenligi Bilisim Ticaret A.S.
      Ankara
      ------------------------------



    5. 7.  RE: Free space on partition /var on MX is running low

      Posted 12-28-2023 21:46

      Hi Cal,

      My bad. Its the /boot path on the /dev/sda1 partition of the MX and the Gateway.

      Ill check on the link you provider regarding cleaning up using the yum-utils for centos.

      TIA,

      Leangf



      ------------------------------
      [Leangf]
      ------------------------------



    6. 8.  RE: Free space on partition /var on MX is running low

      Posted 01-27-2024 00:57

      Update on this case.

      Support provided me the necessary script to remove old kernel versions. I was able to reduced the /boot partition size on both MX and GW disks.

      Imperva all the way :-)



      ------------------------------
      [Leangf]
      ------------------------------



    7. 9.  RE: Free space on partition /var on MX is running low

      Posted 01-29-2024 05:25

      Woohoo! Glad you got sorted, Angfe.

      Thanks so much for coming back to update Community!



      ------------------------------
      Sarah Lamont
      Digital Community Manager
      ------------------------------