EventTrace.bt9 Logs filling disk space

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Files with name similar to 'EventTrace-20190109-4.bt9' are filling up the disk space on the App Control Server.

 

Environment

• App Control (formerly CB Protection Server): 7.2.x and Higher
• App Control Console: 7.2.x and Higher

Cause

The 'EventTrace.xxxxxxxx.bt9' files are created when 'External Analytics' has been enabled in the App Control Console

Resolution

To view the current External Analytics settings:

1. Open the App Control Console
2. Click the Configuration (gear) icon 
3. Choose System Configuration 
4. Click on the External Analytics tab

Additional Information

Steps to control the amount, and size of Event data to export is discussed on Pg 904 of the User Guide here