topic Re: ISE 3.1 psn - no space left on device in Network Access Control

ISE 3.1 psn - no space left on device

amitmark100 — Wed, 27 Jul 2022 11:11:02 GMT

Hi,

Suddenly ISE psn started to log this message:

"/opt/system/bin/mergetree.sh :cannot create temp file for here-document : No space left on device."

Because of this error , psn posture does not work. and i get the following error:

"Agentless script upload failed"

what can i do?

Thank you

Re: ISE 3.1 psn - no space left on device

ahollifield — Wed, 27 Jul 2022 13:07:40 GMT

How much disk space do you have allocated to your PSN? Is this an appliance or a VM? The minimum disk size for a VM PSN is 300GB but I typically recommend 600GB to match the 3615 hardware appliance.

Re: ISE 3.1 psn - no space left on device

amitmark100 — Wed, 27 Jul 2022 13:43:07 GMT

I am using a vm.

600 GB disk

Re: ISE 3.1 psn - no space left on device

Marcelo Morais — Wed, 27 Jul 2022 14:23:54 GMT

Hi @amitmark100 ,

double check your Internal Filesystem space via:

ise/admin# show disks
 Internal filesystems:
 ...
 all internal filesystems have sufficient free space

Open a TAC Case, mergetree.sh file can only be accessed through Root Access.

Hope this helps !!!

Re: ISE 3.1 psn - no space left on device

amitmark100 — Wed, 27 Jul 2022 14:48:15 GMT

Okay.

But why is this happening?

I do not have a lot of endpoints at the moment. How is it that the server is already full?

doesn't ISE PSN have some kind of automatic purging capabilities?

Than you

Re: ISE 3.1 psn - no space left on device

ahollifield — Wed, 27 Jul 2022 15:50:00 GMT

Endpoint purge rules (besides guest and BYOD) are not configured by default. It is best practice to configure them as needed for your environment. However, this probably not your issue. You will need TAC assistance here to login with root to determine what is using the disk space.

Re: ISE 3.1 psn - no space left on device

Marcelo Morais — Wed, 27 Jul 2022 19:39:09 GMT

Hi @amitmark100 ,

could be many things ... just a couple:

1. Local Log Storage period ... at Administration > System > Logging > Log Settings

2. not default Log Level ... at Administration > System > Logging > Debug Log Configuration

In other words, open a TAC Case is good Action Plan.

Hope this helps !!!

Re: ISE 3.1 psn - no space left on device

Arne Bier — Wed, 27 Jul 2022 20:21:28 GMT

Did you have any debug logging enabled at the time? Perhaps from a previous troubleshooting episode? Those debugs can create a lot of logs. I agree with Marcelo - TAC will need to look under the bonnet and help you out. 😞