Imperva Cyber Community

communities_1.jpg
 View Only

  • 1.  Gateway failed to write event – Alert keeps recurring

    Posted 08-20-2025 00:18

    Hi Imperva Community,

    I'm facing an issue with our Gateway where the following critical alarm keeps appearing repeatedly:
    "Gateway failed to write violation(alert) event to disk."

    The detailed message states:

    • The Gateway's disk is full.

    • There may be a permissions problem with the file.

    • Check the file's write permission.

    • Contact Imperva support.

    Even after performing some checks, the alarm continues to appear over and over again.

    Has anyone experienced a similar issue?

    • How can I accurately identify the root cause (disk space issue, file permission problem, or something else)?

    • Are there best practices for cleaning up old logs/data on the Gateway to prevent this?

    • Should this be escalated directly to Imperva Support, or can it be resolved with regular maintenance steps?

    Any guidance or shared experience would be greatly appreciated.

    Thanks in advance 🙏

    error massages

    #DatabaseActivityMonitoring

    ------------------------------
    Bagus Dwi Prasetyo
    Security Engineer
    PT. NEPTUS TEKNOLOGI INDONESIA
    Jakarta
    ------------------------------


  • 2.  RE: Gateway failed to write event – Alert keeps recurring

    Posted 08-20-2025 09:08

    Hi @Bagus Dwi Prasetyo

    I had the same issue days ago

    And support said, the problem is that the Gateway has reached Peak overload capacity

    And you need to validate what kind of traffic cause this issue and create and Agent Monitoring Rule to exclude this traffic to reduce the exceeded traffic



    ------------------------------
    Alejandro Hernandez
    SICAP
    Professional Services Consultant and Principal Technical Trainer
    Mexico City
    ------------------------------



  • 3.  RE: Gateway failed to write event – Alert keeps recurring

    Posted 08-24-2025 23:51

    Hi Alejandro Hernandez,

    Thank you very much for helping answer my question earlier. I will try to reduce it by adjusting the agent monitoring rule to avoid overload.

    However, I would like to validate this alarm. Based on the alarm details provided, the information indicates an issue related to the disk (either full or permission related). This seems to be contradictory to your previous explanation regarding the information from imperva support, which stated that the root cause was excessive traffic.



    ------------------------------
    Bagus Dwi Prasetyo
    Security Engineer
    PT. NEPTUS TEKNOLOGI INDONESIA
    Jakarta
    ------------------------------

    Original Message


  • 4.  RE: Gateway failed to write event – Alert keeps recurring

    Posted 08-25-2025 07:49

    Hi Bagus,

    I am also facing the same error. I have already increased the disk space and deleted unused files from the Gateway, but the error is still recurring. I have raised a support case, but so far, I haven't received any response from the Imperva Support Team.

    If anyone has any ideas or suggestions, please let us know.



    ------------------------------
    Rakesh Nai
    IT Security Engineer
    Paramount Computer Systems EZ LLC
    kuwait
    ------------------------------

    Original Message


  • 5.  RE: Gateway failed to write event – Alert keeps recurring

    Posted 08-25-2025 16:48

    Hi Rakesh/Bagus,

    Could you please let us know the version of the DAM tool that is being used in your organisation?

    Regards,



    ------------------------------
    SBISOC 4430
    Manager
    Mumbai
    ------------------------------

    Original Message


  • 6.  RE: Gateway failed to write event – Alert keeps recurring

    Posted 08-26-2025 01:57
    Edited by Rakesh Nai 08-26-2025 02:00

    Hi SBISOC 4430,

    DAM Version 14.16.1.10



    ------------------------------
    Rakesh Nai
    IT Security Engineer
    Paramount Computer Systems EZ LLC
    kuwait
    ------------------------------

    Original Message


  • 7.  RE: Gateway failed to write event – Alert keeps recurring

    Posted 08-26-2025 02:58

    Hi Rakesh,

    We did not encounter such alarm and we are using higher version. 

    As per KB article and community thread, we understand that MX table stores only 2 x 250000 alerts and the system also performs table switch based on the specified conditions.

    https://docs-cybersec.thalesgroup.com/bundle/z-kb-articles-knowledgebase-support/page/290197384.html 

    https://community.imperva.com/communities/community-home/digestviewer/viewthread?MessageKey=acc0ab80-ec1a-4b1d-8486-7e5766365947&CommunityKey=39c6092a-d67a-4bc2-8134-bfbb25fc43af&pk_vid=17561909400f18b0#bmacc0ab80-ec1a-4b1d-8486-7e5766365947

    Regards,



    ------------------------------
    SBISOC 4430
    Manager
    Mumbai
    ------------------------------

    Original Message


  • 8.  RE: Gateway failed to write event – Alert keeps recurring

    Posted 09-02-2025 23:40

    Hi Communitas Imperva,

    We received a response from support regarding this issue, and it might be helpful for everyone.

    Based on the discussion with Kundan Krishnam from the support team, we were able to identify several categories that could potentially trigger these alarms:

    1. The number of alerts received by the MX is too high.

    2. The HPS is far beyond its capacity.

    3. CPU usage exceeds 95%.

    4. As mentioned by @Alejandro Hernandez (OCPM), a peak may occur due to alerts generated by a single policy that places a heavy load on the device.

    Thanks



    ------------------------------
    Bagus Dwi Prasetyo
    Security Engineer
    PT. NEPTUS TEKNOLOGI INDONESIA
    Jakarta
    ------------------------------