Firepower Disk Usage:0 - Disk Drain of unprocessed events from Connection Events…

[sam cook]

Hi:

FMC  version: 6.2.2

FTD 2130

Has anyone ever seen this health global alert before please ? :

Firepower Disk Usage:0 - Disk  Drain of unprocessed events from Connection Events… 

As a result I don't have any eventlog in the FMC

regards,

[phil.hydea]

Hi,

Yes I have seen something very similar to this on FP8100 NGIPS devices.

It's basically due to a high-rate of connections being processed by the
device (commonly seen with high rates of DNS traffic for example). Cisco
TAC have said to me that there is nothing to be concerned with here however
I would recommend raising a TAC case just to verify with them.

Just out of interest, is your connection logging set to Beginning and/or
End in the Access Control Policy?

Hope this is OK.

Cheers
Phil