FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
Andy_G
Staff
Staff
Article Id 192597

Description

If you use NetApp for AccelOps event storage, you may want to change your default settings for the number of snapshots that the appliance takes of your data. In the default settings, NetApp will take three snapshots of your data, each of the same size. This means that if your event data is 20GB, it will actually consume 60GB of storage space because of the default snapshot settings. This can also cause the AccelOps phDataManager process to crash, because it will automatically begin to purge data from storage when the remaining storage capacity is under 10GB. In the case of NetApp with the default snapshot settings, this means that attempting to store 3.5GB of data would exceed the 10GB capacity overhead, leading to a process crash. 



 
Contributors