/storage/core partition is running out of available disk space on an Aria Operations for Logs virtual appliance.

Products

• VMware Aria Suite

Issue/Introduction

• On an Aria Operations for Logs appliance, if the /storage/core partition reaches values higher than 97% used disk space, it may indicate a possible issue with the virtual appliance.
  
  

Environment

Aria Operations for Logs 8.x

Cause

• It is expected behavior that the /storage/core partition is at 97%.
  Values of higher than 97% indicate a possible issue with the Aria Operations for Logs virtual appliance
• Aria Operations for Logs will check this partition once per minute to ensure free disk space is not less than 3%.
  If the free disk space on the virtual appliance drops below 3%, old data buckets are retired.
  
  However, if the log ingestion rate is higher than 3% of total disk capacity per minute, a situation can arise where the Aria Operations for Logs virtual appliance runs out of disk space.
  
  Also if archiving is enabled, Aria Operations for Logs archives the bucket before retiring it. If the free disk space is filled before the old bucket is archived and retired, the Aria Operations for Logs virtual appliance also runs out of disk space.

Resolution

Article to refer: Aria Operations for Logs deletes old buckets when the available space on the /storage/core partition is less than 3%.