https://community.cisco.com/t5/network-security/disk-usage-issue-on-cisco-firepower/m-p/4129131#M1072521 Hi,<BR /><BR />I suggest to apply these commands to see the actual files occupying sizes<BR /><BR />find /home -type f -print0 | xargs -0 du -h | sort -rh | head -n 30<BR /><BR />find /ngfw -type f -print0 | xargs -0 du -h | sort -rh | head -n 30<BR /><BR />find /var/sf -type f -print0 | xargs -0 du -h | sort -rh | head -n 30<BR /><BR />You will see things like update files, logs files, etc not deleted.<BR /><BR />**** please remember to rate useful posts<BR /> Sun, 02 Aug 2020 07:05:09 GMT Mohammed al Baqari 2020-08-02T07:05:09Z https://community.cisco.com/t5/network-security/disk-usage-issue-on-cisco-firepower/m-p/4129018#M1072511 <P>I have low space in file system /var/ en my cisco firepower sensor, I validated files with big weight and I found a file in path /var/sf/detection_engines that takes a lot of space (110G):</P><P>&nbsp;</P><P>root@SFNGIPSB:/var/sf/detection_engines# du -sh *</P><P>&nbsp;</P><P>110G 5b63061c-a756-11e8-8842-8a7aff71b588</P><P>116M 5b6dd3b2-a756-11e8-8842-8a7aff71b588</P><P>116M 5b6ed564-a756-11e8-8842-8a7aff71b588</P><P>&nbsp;</P><P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/855265">@ciscoCommunity</a> Can I delete this file?</P> Sat, 01 Aug 2020 14:26:55 GMT https://community.cisco.com/t5/network-security/disk-usage-issue-on-cisco-firepower/m-p/4129018#M1072511 alejandrolopezlext 2020-08-01T14:26:55Z https://community.cisco.com/t5/network-security/disk-usage-issue-on-cisco-firepower/m-p/4129121#M1072520 <P>Older detection engine folders may be deleted. Make sure it's not the one associated with your current policy.</P> Sun, 02 Aug 2020 06:22:36 GMT https://community.cisco.com/t5/network-security/disk-usage-issue-on-cisco-firepower/m-p/4129121#M1072520 Marvin Rhoads 2020-08-02T06:22:36Z https://community.cisco.com/t5/network-security/disk-usage-issue-on-cisco-firepower/m-p/4129131#M1072521 Hi,<BR /><BR />I suggest to apply these commands to see the actual files occupying sizes<BR /><BR />find /home -type f -print0 | xargs -0 du -h | sort -rh | head -n 30<BR /><BR />find /ngfw -type f -print0 | xargs -0 du -h | sort -rh | head -n 30<BR /><BR />find /var/sf -type f -print0 | xargs -0 du -h | sort -rh | head -n 30<BR /><BR />You will see things like update files, logs files, etc not deleted.<BR /><BR />**** please remember to rate useful posts<BR /> Sun, 02 Aug 2020 07:05:09 GMT https://community.cisco.com/t5/network-security/disk-usage-issue-on-cisco-firepower/m-p/4129131#M1072521 Mohammed al Baqari 2020-08-02T07:05:09Z https://community.cisco.com/t5/network-security/disk-usage-issue-on-cisco-firepower/m-p/4129640#M1072540 <PRE>&nbsp;</PRE><P><SPAN>Effectively, e</SPAN>ngine folder with high weight is the one associated with my current policy , the next files have huge weight:</P><P>root@SFNGIPSB:/var/sf/detection_engines/5b63061c-a756-11e8-8842-8a7aff71b588#&nbsp;du -sh *</P><P>32G instance-1<BR />19G instance-2<BR />14G instance-3<BR />14G instance-4<BR />14G instance-5<BR />18G instance-6</P><P>&nbsp;</P><P>what can I&nbsp; do to free up space?</P> Mon, 03 Aug 2020 16:10:35 GMT https://community.cisco.com/t5/network-security/disk-usage-issue-on-cisco-firepower/m-p/4129640#M1072540 alejandrolopezlext 2020-08-03T16:10:35Z https://community.cisco.com/t5/network-security/disk-usage-issue-on-cisco-firepower/m-p/4129641#M1072541 <P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/326046">@Marvin Rhoads</a>&nbsp; Effectively, engine folder with high weight is the one associated with my current policy , the next files have huge weight:<BR /><BR />root@SFNGIPSB:/var/sf/detection_engines/5b63061c-a756-11e8-8842-8a7aff71b588#&nbsp;du -sh *<BR /><BR />32G instance-1<BR />19G instance-2<BR />14G instance-3<BR />14G instance-4<BR />14G instance-5<BR />18G instance-6<BR /><BR />what can I&nbsp; do to free up space?</P> Mon, 03 Aug 2020 17:08:58 GMT https://community.cisco.com/t5/network-security/disk-usage-issue-on-cisco-firepower/m-p/4129641#M1072541 alejandrolopezlext 2020-08-03T17:08:58Z https://community.cisco.com/t5/network-security/disk-usage-issue-on-cisco-firepower/m-p/4129659#M1072543 I suggest to contact tac to get their confirmation before deleting files.<BR />You don't want to get this wrong.<BR /><BR />**** please remember to rate useful posts<BR /> Mon, 03 Aug 2020 17:13:33 GMT https://community.cisco.com/t5/network-security/disk-usage-issue-on-cisco-firepower/m-p/4129659#M1072543 Mohammed al Baqari 2020-08-03T17:13:33Z https://community.cisco.com/t5/network-security/disk-usage-issue-on-cisco-firepower/m-p/4129710#M1072550 <P>I agree with <a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/292493">@Mohammed al Baqari</a> to check with TAC first. They should confirm you can delete the old detection engine files.</P> Mon, 03 Aug 2020 19:07:57 GMT https://community.cisco.com/t5/network-security/disk-usage-issue-on-cisco-firepower/m-p/4129710#M1072550 Marvin Rhoads 2020-08-03T19:07:57Z