NO space left on this device

[Enekupe Lelevaga]

Looking for a solution, 

Wazuh Manager space is full so log coming through, 

Elasticsearch space is full, and Kibana is not running. 

Appreciate the help. 

Cheers

[Damian Alfredo Mangold]

Hi !!, thanks for using Wazuh!
I will take a look at your question and give you an answer as soon as possible.

To properly understand your question. Do you need to know which files to delete to free up space on your device?

Regards !
Damian.

[Enekupe Lelevaga]

No, can you guide me through it, I am planning to expand or shrink the virtual hard disk of the wazuh host on the Hyper-V Manager, the server is running on Hyper-V.

But at the moment, can't expand it because the edit function is not visible, something to do with checkpoints. So I'm just gonna backup the server and delete all checkpoints and try it again. 

Appreciate any other option. 

Thanks

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/8d17f4ab-ef79-4cc4-ae43-a6a0e07a5b96n%40googlegroups.com.

[Damian Alfredo Mangold]

Regarding how to increase the size of the virtual machine, I can share some queries from the community and suggestions from my colleagues, maybe one of them can help you:

• https://groups.google.com/g/wazuh/c/CVq0Cfo1hPA
  
• https://github.com/wazuh/wazuh/issues/11017
  

Something you should know is that log rotation does not delete old logs, for that you must perform some actions to delete old logs, these are some of the recommended options:

• You can create policies that govern the life cycle of the indexes based on different phases
  • https://wazuh.com/blog/wazuh-index-management/

• You can choose when to automatically delete records based on your own legal and regulatory requirements by using cron jobs for example.
  • https://documentation.wazuh.com/4.3/user-manual/capabilities/log-data-collection/log-data-faq.html#how-long-are-the-logs-stored-on-the-server
    
  • https://documentation.wazuh.com/4.3/getting-started/architecture.html#archival-data-storage
    
  • https://en.wikipedia.org/wiki/Cron

• Here I share a question from the community that may be of interest to you
  • https://groups.google.com/g/wazuh/c/tZ3bO6Kaidw
    

I hope all this information is useful to you.

Regards. 
Damian