Imperva Cyber Community

 View Only
  • 1.  Agent local disk quota has been exceeded

    Posted 11-04-2022 09:07
    We are continuously receiving "Agent local disk quota has been exceeded" alert for the below agents

    We are already having below tag as quota size

    <quota>20000</quota>

    Kindly suggest if any other method is there to stop this alert.
    #DatabaseActivityMonitoring

    ------------------------------
    R. Sankarganesh
    ------------------------------


  • 2.  RE: Agent local disk quota has been exceeded

    Posted 11-04-2022 14:32
    Hello Sankarganesh,

    Thank you for your post, their could be multiple reasponse for this error message,
    1. Connectivity problem between gateway and agent
    2. Gateway is overloaded and it is not accepting connections from agent
    We get the disk quota exceeded error, if we have connectivity issue between agent and the gateway, in that case agent will not be able to send the data to gateway and it will start writing the data locally, by default it will write until 8gb data is collected once its filled, agent will no more be able to collect the data and we get this error.

    As a trouble shooting steps, we can check agent and the gateway logs during that time stamp, also check the connectivity with below steps,

    telnet GW_IP 443

    telnet GW_IP 5555



    ------------------------------
    Syed Noor Fazal
    Product Support Engineer
    ------------------------------



  • 3.  RE: Agent local disk quota has been exceeded

    Posted 11-05-2022 11:17
    Hi Syed,

    Thanks for your reply.

    As per your recommendation i tried testing the connectivity between the agent and gateway and connectivity is there,

    When i telnet the gateway i see it is getting connected, but when i give ping command im seeing packet loss.

    Anyother suggestion to fix this issue,


    ------------------------------
    R. Sankarganesh
    ------------------------------



  • 4.  RE: Agent local disk quota has been exceeded

    Posted 11-05-2022 14:40
    Hello Sankarganesh,

    If you are able to connect through telnet on port 443(management purpose) and port 5555 (data port), that should be good enough, but please make sure that you are testing the connectivity, when the issue is happening, to make its not a network issue.

    Also you can check the agent and gateway logs during that time period, what's happening at that time stamp, that will give us more information.


    ------------------------------
    Syed Noor Fazal
    Product Support Engineer
    ------------------------------



  • 5.  RE: Agent local disk quota has been exceeded

    Posted 30 days ago
    Sankar,
    Please keep in mind that gateway and MX appliances have ping disabled by default and will not respond unless enabled.

    ------------------------------
    Paul Hammons
    Imperva Senior Sales Engineer
    Cape Coral, Florida
    ------------------------------



  • 6.  RE: Agent local disk quota has been exceeded

    Posted 30 days ago
    Sankar,
    After you confirm it is not a network layer issue...
    I would also recommend adding this switch to the agent advanced config. 

    <bulk-compression-method>Compression Snappy</bulk-compression-method>

    It will significantly increase the amount of data sent with every packet, which minimizes the need for disk queuing and flushes the queued data faster when a connection is re-established.
    It may not completely solve the issue, but will help.

    The second recommendation is agent exclusion rules to eliminate unnecessary data from being transmitted from the agent.  Exclude replication traffic, backups, disabled replication interfaces, etc.



    ------------------------------
    Paul Hammons
    Imperva Senior Sales Engineer
    Cape Coral, Florida
    ------------------------------



  • 7.  RE: Agent local disk quota has been exceeded

    Posted 30 days ago
    Hi Paul,

    Thank you so much for your reply.

    Agree that ping might be disabled, because i checked with the agents which don't have any issue for them also ping is failed, so it is disabled.

    I added the tag which will help in a smaller sized file , but still Alert is coming.

    <max-file-size-mb>512</max-file-size-mb>



    ------------------------------
    R. Sankarganesh
    ------------------------------