As per KB article and community thread, we understand that MX table stores only 2 x 250000 alerts and the system also performs table switch based on the specified conditions.
https://docs-cybersec.thalesgroup.com/bundle/z-kb-articles-knowledgebase-support/page/290197384.html
https://community.imperva.com/communities/community-home/digestviewer/viewthread?MessageKey=acc0ab80-ec1a-4b1d-8486-7e5766365947&CommunityKey=39c6092a-d67a-4bc2-8134-bfbb25fc43af&pk_vid=17561909400f18b0#bmacc0ab80-ec1a-4b1d-8486-7e5766365947
Original Message:
Sent: 08-26-2025 01:56
From: Rakesh Nai
Subject: Gateway failed to write event – Alert keeps recurring
Hi SBISOC 4430,
DAM Version 14.16.1.10
------------------------------
Rakesh Nai
IT Security Engineer
Paramount Computer Systems EZ LLC
kuwait
Original Message:
Sent: 08-25-2025 16:47
From: SBISOC 4430
Subject: Gateway failed to write event – Alert keeps recurring
Hi Rakesh/Bagus,
Could you please let us know the version of the DAM tool that is being used in your organisation?
Regards,
------------------------------
SBISOC 4430
Manager
Mumbai
Original Message:
Sent: 08-25-2025 07:49
From: Rakesh Nai
Subject: Gateway failed to write event – Alert keeps recurring
Hi Bagus,
I am also facing the same error. I have already increased the disk space and deleted unused files from the Gateway, but the error is still recurring. I have raised a support case, but so far, I haven't received any response from the Imperva Support Team.
If anyone has any ideas or suggestions, please let us know.
------------------------------
Rakesh Nai
IT Security Engineer
Paramount Computer Systems EZ LLC
kuwait
Original Message:
Sent: 08-24-2025 23:51
From: Bagus Dwi Prasetyo
Subject: Gateway failed to write event – Alert keeps recurring
Hi Alejandro Hernandez,
Thank you very much for helping answer my question earlier. I will try to reduce it by adjusting the agent monitoring rule to avoid overload.
However, I would like to validate this alarm. Based on the alarm details provided, the information indicates an issue related to the disk (either full or permission related). This seems to be contradictory to your previous explanation regarding the information from imperva support, which stated that the root cause was excessive traffic.
------------------------------
Bagus Dwi Prasetyo
Security Engineer
PT. NEPTUS TEKNOLOGI INDONESIA
Jakarta
Original Message:
Sent: 08-20-2025 09:07
From: Alejandro Hernandez
Subject: Gateway failed to write event – Alert keeps recurring
Hi @Bagus Dwi Prasetyo
I had the same issue days ago
And support said, the problem is that the Gateway has reached Peak overload capacity
And you need to validate what kind of traffic cause this issue and create and Agent Monitoring Rule to exclude this traffic to reduce the exceeded traffic
------------------------------
Alejandro Hernandez
SICAP
Professional Services Consultant and Principal Technical Trainer
Mexico City
Original Message:
Sent: 08-20-2025 00:18
From: Bagus Dwi Prasetyo
Subject: Gateway failed to write event – Alert keeps recurring
Hi Imperva Community,
I'm facing an issue with our Gateway where the following critical alarm keeps appearing repeatedly:
"Gateway failed to write violation(alert) event to disk."
The detailed message states:
The Gateway's disk is full.
There may be a permissions problem with the file.
Check the file's write permission.
Contact Imperva support.
Even after performing some checks, the alarm continues to appear over and over again.
Has anyone experienced a similar issue?
How can I accurately identify the root cause (disk space issue, file permission problem, or something else)?
Are there best practices for cleaning up old logs/data on the Gateway to prevent this?
Should this be escalated directly to Imperva Support, or can it be resolved with regular maintenance steps?
Any guidance or shared experience would be greatly appreciated.
Thanks in advance 🙏
#DatabaseActivityMonitoring
------------------------------
Bagus Dwi Prasetyo
Security Engineer
PT. NEPTUS TEKNOLOGI INDONESIA
Jakarta
------------------------------