FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
Andy_G
Staff
Staff
Article Id 192905

Description

Summary of Article

This article is used to assist users in managing their data usage in AO.  This will require ssh access to your AO's Super.

 

Steps

1  - Under AO UI

a - Go under the Admin Tab > License Management

On the Right hand panel, you will see on the upper left side there will be a "Current Usage" Column with "Online Data Access - ODA (GB)".  This will provide you information on how much space is live on the partition that the EVENTDB lives.  The "Allowed" column really has no meaningful uses so you can ignore that.

2 - CLI - SSH

a - Log into AO and run a "df -h"

b - Please pay attention to the output on the line that contains "/data"

[root@xxxxxxxxx ~]# df -h

Filesystem            Size  Used Avail Use% Mounted on

/dev/sda3              33G   14G   18G  43% /

/dev/sda1             122M   12M  104M  10% /boot

tmpfs                 7.9G     0  7.9G   0% /dev/shm

/dev/sdb1              20G  1.3G   18G   7% /cmdb

/dev/sdc               60G   46G   11G  81% /data

 

Example: the /data directory is on /dev/sdc.  There is 60Gigs of disk space at your disposal / 46Gigs of the disk used / 11Gigs of space left and available / 81% of the disk is being used.

 

3 - Run AO's canned system report System Disk Usage

a - Go to Analytics > Reports > Event Status

b - Highlight a report called System Disk Usage.

c - Click the button labeled Run Now (Located on the upper right side of the right panel). 

d - Change Report time range to Last 1 Day.

e - Click OK

The resulting report will give you the disk usage.  Note that there are system generated events when free disk space for the eventDB goes below 10GB so you will receive an incident for that situation.

 

Contributors