cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Module Disk Usage: High unmanaged disk usage on /Volume.

Enid Vallja
Beginner
Beginner

Hi,

I have a critical notification on my Sourcefire - Health Monitor. 

It says "Module Disk Usage: High unmanaged disk usage on /Volume" even though the Sourcefire has a lot of free memory.

Please tell me what can I do with the "/Volume" directory to free some memory.

Best regards,

Enid.

21 REPLIES 21

Dinesh Verma
Cisco Employee
Cisco Employee

Hi Enid,

Mostly /var/tmp/ contains a lot of temporary files. So you might want to try this (This is general):

--> SSH to the module

--> Go to expert mode

--> Become root: sudo su

--> Go to: cd /var/tmp/

--> Remove temp stuff using this command: rm -rf Apply_*

Apply_<random> files are created when you deploy things from FMC to the module. Other place you might want to check is

/var/sf/updates/  (here you can delete all older upgrade files).

/var/common/ (delete old TS and core files)

Command: du -sh * (is useful to list  out which directories with size). Find out the directories with huge size and if there is unwanted backup or TS files, delete them.

This article is quite helpful too: http://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118719-technote-firesight-00.html 

Regards,

Dv

Hi Dv,

I don't think this has to do with the /Volume directory because I deleted yesterday some filesto free some memory but it still points the /Volume.

Regards,

Enid.

Run the command: df -TH and provide me the output. We will see if it's false health alarm.

This is the output (memory.jpg), and please take a look to the alerts (alerts.jpg).