cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1183
Views
0
Helpful
1
Replies

CSCvf34107 - False positive alerts for High Unmanaged Disk usage on /Volume - 1

dpereziii
Level 1
Level 1

I'm currently running 6.3.0.3 on one of my sensors that is experiencing this issue. Usage racked up during an upgrade attempt to 6.4.0. Update failed and started producing the high Unmanaged Disk usage on /Volume. I opened a ticket and cleared down to 63% used. I ran the PMTOOL, rebooted the sensor and FMC several times. I'm still receiving the High Disk Usage alert and unable to upgrade. Tech recommended that I reimage the sensor, but I'm open to ideas before I settle for a reimage. Any thoughts. Below are the logs for the upgrade attempt:

 

root@firepower:/var/log/sf/Cisco_Network_Sensor_Upgrade-6.4.0# tail -f status.log

ui:[17%] Running script 200_pre/201_disable_faild.sh...

ui:[18%] Running script 200_pre/202_disable_syncd.sh...

ui:[18%] Running script 200_pre/400_restrict_rpc.sh...

ui:[19%] Running script 200_pre/470_revert_prep.sh...

ui:[19%] Running script 200_pre/500_stop_system.sh...

ui:[21%] Running script 200_pre/600_ftd_onbox_data_export.sh...

ui:[21%] Running script 200_pre/999_enable_sync.sh...

ui:[24%] Running script 300_os/200_check_chroot_mount.sh...

ui:[36%] Running script 600_schema/100_update_database.sh...

ui:[36%] Fatal error: Error running script 600_schema/100_update_database.sh. For more details see /var/log/sf/Cisco_Network_Sensor_Upgrade-6.4.0/600_schema/100_update_database.sh.log on the device being upgraded.

  _update_database.sh.log

 

root@firepower:/var/log/sf/Cisco_Network_Sensor_Upgrade-6.4.0/600_schema# tail -f 100_update_database.sh.log 

[191028 02:51:40:685] Root disk free = 2622700K, Var disk free = -K

Checking free /var disk space...

Find largest table in /var/lib/mysql ...

ls: cannot access /var/lib/mysql/sfsnort: No such file or directory

expr: syntax error

expr: syntax error

Checking for K of /var disk space to upgrade the database

expr: syntax error

Total /var disk space needed for upgrade is

./functions.install: line 1302: / 2: syntax error: operand expected (error token is "/ 2")

1 Accepted Solution

Accepted Solutions

dpereziii
Level 1
Level 1
In the /Volume directory of the module, there are two directories. 6.3.0 and the 6.4.0, but it’s still on 6.3.0.3 and both directories are over 15GB in usage. Guessing it created the 6.4.0 during the partial upgrade and did not rollback after failure. I removed the entire 6.4.0 directory, ran the pmtool and error cleared.

View solution in original post

1 Reply 1

dpereziii
Level 1
Level 1
In the /Volume directory of the module, there are two directories. 6.3.0 and the 6.4.0, but it’s still on 6.3.0.3 and both directories are over 15GB in usage. Guessing it created the 6.4.0 during the partial upgrade and did not rollback after failure. I removed the entire 6.4.0 directory, ran the pmtool and error cleared.