Alarm space usage

[Team_ICT]

Hello,

does anyone knows where to check how much disk space Alarms are using (through GUI or CLI)? And can we send alarms to ELM or they are just stored on ESM?

Many Thanks.

[pbpillai · Accepted solution]

The unacknowledged alarms are stored in the index_hd.

Only raw logs from the datasources and the logs from the ACE are sent to the ELM.

You can delete the old triggered alarms either by selecting & using the shift button from the Triggered Alarm view of the ESM GUI.

We also have a nquery command which can be used to remove the entries prior to a particular date in the TriggeredAlarm table of the DB.

You would require supervision of Technical support to remove the entries from the TriggeredAlarm table.

Keeping a lot of old alarms can also cause performance issues for the ESM GUI.

Regards,

Prashanth B Pillai

McAfee Technical Support

Customer Success Group

[Team_ICT]

Will do that, thank you Prashanth.

Cheers