NSX Network Detection and Response - How to troubleshoot high disk in /var/lib/docker/overlay
search cancel

NSX Network Detection and Response - How to troubleshoot high disk in /var/lib/docker/overlay

book

Article ID: 382362

calendar_today

Updated On:

Products

VMware vDefend Network Detection and Response

Issue/Introduction

High disk usage alert on appliance

Normally you would see an error as below on the sensor in the UI:

Filesystem usage of the root partition

 

Environment

All VMware vDefend Network Detection and Response appliances on or before version 1371(9.8)

Cause

High disk usage on /dev/mapper/lastline--manager--vg-var directory, due to one of the docker container filling up with logs.

Resolution

Steps to follow when you are not sure which service log file is consuming how much space:

Check the disk usage, using command df -h

Executing df -h as current user
 Filesystem                              Size  Used Avail Use% Mounted on
 udev                                     32G     0   32G   0% /dev
 tmpfs                                   6.3G  9.6M  6.3G   1% /run
 /dev/mapper/lastline--manager--vg-root   38G  5.2G   31G  15% /
 tmpfs                                    32G     0   32G   0% /dev/shm
 tmpfs                                   5.0M     0  5.0M   0% /run/lock
 tmpfs                                    32G     0   32G   0% /sys/fs/cgroup
 /dev/sda2                               188M  5.0M  183M   3% /boot/efi
 /dev/mapper/lastline--manager--vg-var   188G  136G   43G  77% /var
 /dev/mapper/lastline--manager--vg-data  3.7T  1.2T  2.3T  35% /data
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/3f7d7dc63d92f1c510ee44bfb1a2d1fe1e8bddb967f8c0b44111796ac0b70271/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/1b4b8033aa57c44d5ed5901e3f12258121dfff9b9e6e9566962ebb319ec77944/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/cc7b56a9ab1a91c76f5d33276400a840a3b61415149978441ae6e12ce67da9cd/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/0291f0ee596ca8e8c0bd435392433fd5d70b5c4b88a9f4b202339f9ca58b0ac9/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/540deac85ffd81e732bf25c81829ce5223d9a0462600259142feaf557ba22510/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/93ef93dd3fa0445c65494e475f0da1bfdc270b626f5c7f6653bc57afb44467bf/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/13a72b7f82b81680ce54209adc655a44cca8a359e1651ec9f95c9eea08053556/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/058695c090076b6f983a005197eba2e91f375e294c98d7a04d6c08d8c782c270/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/bcd7a3fd25748d980969897741c45545ebc69d8cd668bb768920814eda68b098/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/bfa2f5518464204c3891b03b59602405800d13e8a22fd18607e783909246d678/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/87ca39e2e45ce5118ff50d4a3e5dfa72fb73068e4043afe4d432ad747d6f986d/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/333ffa886d818304aedeaf243fd255a9bc2ee5a7bec9bca980eb60f42696e66f/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/4aca7017d22efc505a383418bd4b697d6f897aa2270e91aeedd2c75550e13e02/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/8ec4fda361b91488a741920dcadd4d83cde8d4fec6896f6e9d4282e8b9d6949d/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/53b96d48e67451de7390865682af9d8683502a18c6102ae37fdb5de912592ca7/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/db847a0a4b2d5869da8cb03323eed2cece08a62aebc04086f5d54de59cb037e9/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/8485df64d970ec79e9df3e8687befb840bb8d18e4fb3ddf9eedb7eefbaf38a30/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/5eee050a334a1d3492e4190217e0d3280716cb4bc4ccb0d9a4d0ecb03559736b/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/76ff375e36dd0c7c4ed52d5a3859881b6b62b601ef13c04ff0e2ab637a5c6f6f/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/1424472567c4882361921631f5386c9b5f281bc06372c8b90f628489b148dd7a/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/4919731ab655960664b68a15f87ce014f8f1248d90f422faf1353aef13a464ef/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/978ced9aca49352ff09a2c070aaa423071a21c9ea4bfeb23e3f1abb6bf798b33/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/ed1ba136bd1cc8b6802314502c908bd5c1b50889b0edd40c8f61bc1f7d880f26/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/e4b1d1b718562e45b456ca5f9e454d968ce71849b27aac835812a1d261a7cbed/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/e155a5ec248086084a501dd69bae2ff3e7415792755d16a2037ee6d4c2f6de27/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/6fdc28b3c3fd6f53a53c1e4fff3044802eeb6d26360476ddc1fb928922239a2a/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/c687fc82a47888ee91784ac093652e5caf3fd722c2f1894c0232a19dcc1e7c04/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/518f93eeb7808e678d892055281ff5361cf95854006e4b7f71db40c7c184778d/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/df1e1cac1a93ef2ac72e9fd8cb8c93c94782a03d1051e04036cebf9cbddf1f2a/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/94c0fb0c0ae05f41d5d3547c1420b601af7aee80bd86c5269dde2e20e5d2d4c6/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/7791bc88d053c7382e06a3db84ecc0604e90cf79c5c4f23e06f0254e3923a0fb/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/2f318a9ba912bcb22aa78a99a96282a22137f624224930bfc790707ea20a8655/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/a0b00f700706307d08fb965354fa1af67a0d7be95d2f0e1363646fc9da26d521/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/fc89361948ce0463b56021ed99e8d2f30d794eca10192b3254bf8a162fa890dd/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/c89b116fa18425db77a2e52a80d5c3b6c2b6665a7d3538d22cdece6503c0cfc9/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/94db993304f7cb6911bcebe816ef99eb703f38b3308111a5e99306917db53828/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/123cc0b56354bdb946dc0bf1985d1e998011d5b346c76ae6cdec54ddc2b95f6b/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/677e41632ef59c5e86145d02d7a08a16046bce2d1365f13bec728bba8d1bec73/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/2dd2cc6ca921c490e9f8099d5a11cf44faea62d5418431e43b24785e2380cd3e/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/179006a412d4c99a5d02e0484b7a4bdf80c6c0eee4cbd0ac58b069157322ac65/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/dd8125cdb8eb3bc51fc3fdf15febe9dbc74f37e058c81b75137570b9e5c3f189/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/5a3e42be8cce99424c7c6a152d900eb6eba89b4418325703c4777390780c168c/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/f8822b50544478b2f3c86741d419d82e75cd35df93af4e6f74b4bac9e66b8e7c/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/769335ee5002d30cbccf383360c8e655bb66eecc91cdf518081b6b998b8a1c15/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/fb33086f6cf69f58e6b200e7d3aa2faa4332b894adeec0c1fa0f0fa38f8ca4b5/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/f92fe8bba5982bddae264ebf2983c1f4d4d6c8b37fe6668106ac19bb04f95a77/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/98e9d66cbd7de8e182d895d753a1fa7cd6930283129e74ff4a36e4031b9bc2f3/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/9e4dc071c6276cc355996540b3f35dc18a9d8d6df828319305b1a9fdada3a709/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/c51dfeca7905146bb6b71fcd728a71e2383cef228ea69b218c164b91d7bba34a/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/7d9bb73b57d11561f43212092b60253596a2e05d0d5585536d565c7e3d7d8453/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/5e0433f094e89acb78bd4048d5babb666b51c20da73d11d9edd3152d7d15bc6d/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/65e7eac909dc78263721deafc0e6038823f6c41453ff24817a55055a929865ed/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/53b30e367fad760b1f7d98c0f5705ebb46f836e71a87afcea6740176d25e72f0/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/8aa678d8636ca180ef7fd7523b93a2ae04701005b001e2d93383a61427cc270d/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/e9729a72e21b834f92753fe444e164a446e011f371c03e1096ab831dfc1cec40/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/9d2735c5b356566a2d456b491d01709e5ad4851acfa1b3e874bc3fe67f86821d/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/051ee8c4728d59c483f27d45f49e628957913bd8326a918c715e82a855fbd734/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/692ba96459fa3afb2b5a158c632d7e1c7ff9275de945a36362181dc3560ef4c2/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/dc564ad4cb3ebcbe7d3287c37435a71133b017b2898b7df19caeaab4e80503e1/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/82d70a0630380d6cd3d02d5be46308f0d3da5f3fa3a9b37897d922bc3b5cbf62/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/95e64de997a86c65efb2985bc1c5904c1e55e2c929fcb434660fc68567096252/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/70bf605fbf64620d6d28cadb62105fe8cd4133ad6cde7949f8638ca80a849834/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/7cd90939dbbddb4149a7ebd2d630806276ccd18fb8dfdca96fe95a87112da587/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/f55049b73561022c87bbafdbdd6ea79d5844359fbddc0496b7cd1137d45b740e/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/daf088e4be0399fb9bd86089e275e476a93de3fd5fd3d52a55f3c4f358ef927a/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/e55651630958111b4dc25f733d314162076e2d9c94db9b9f12ffdf0e45b47c8d/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/fabdb55b9b8d363c48eebac15a52f961c2a5e922960635e3119b52ca86a54cdd/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/f93bcafb15ec1b9fe8865d135d8a99b7bad744cf614524814904e0fbf986fedd/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/5006680ba9eac9e203bf6d6b4e7ffdc0ced4df2c9c13e715abbe708c6111956b/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/0e6eb675a53fa4b282a2d67e543935cdc41443965981ac2be7cecdd6ba22a772/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/4289d7111790a82bde30953d4e4e7676be51e54e05d4c5d7f8801966d99abf10/merged
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/dc4b70a5a6e771b0b6fad19bf37c45f01241a453a25dceb6c5dc4ee72191de85/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/2d7c5e5c61aaeb9546eaf34b63d83a2d52b81a9e87119515e3e1d120422b2de4/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/4b38b5c5dbb9282e860a8d80c6472a01985560847294cb8361a6cc193d4e2226/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/074e7ff17f238e38ef6623589c29d5a8c636c6f39206971300fcdbcb71e1a31f/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/02eacac229df6a8d693655b69559f41dbf60f1f40cbf7c79c370968416ddfdce/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/c47233a0f4e98e93592b90ade96cfc79a9ad08b61e51c63ab6417401e113eac4/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/bcc630a64d963286aa6c79e2243fb217f94ce5dab9e5239e1334eb2d40ed4c85/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/71127fb8469b8e3a0a54a605e355c7336de7b77cb74ab2967d575144ef700999/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/52fd8a24009b5898655adf3df23d589dda96bb837e2b70e4f39fd831f0cb7a50/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/fed786039611fd939175e31f292971975501cf14540e34af7f911ba08b36f16b/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/64f2deb2acc7a8dcf6ab29d95518e505fef3f45ed64b265c55e7590c967f0534/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/22038ab463e309cd9a0eeacc35d8b00e89bfbbe5c5d0dae0ffe322b6acdaaa58/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/7dbef8ffc7a52925e36693f105371e8f36d5c054d7915f2d3a7123cf75cba85e/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/df043b87246bf5b46a18639929dbc447e7867d4faef110c70a42a02b83c0687c/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/2a239d37ac6bd830824f8fbeecc227d59b0186c77246fb5a0323b77a3e11f416/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/5f29face0ca5caebc1c5ccd262e90baaca95b93eec1ca85a977ace6fa957be48/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/8a1ef6bbf9ba4068f7bab8463251afb514e8c83db35aa22048d4c1a724c9d9e3/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/3a4a8cff939e6f9f3312316316b80aceabc4cb9c7dfc768761791af2fc67a73f/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/7d4091c63ba9f43c90d507c979970d9c7afed1380f27d2154f549dc588bdfda0/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/4cbe552be4fb84ee4a4fb6e12ec3349a96a695b83bfa1d4fcee8923267d36027/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/6be0a102762c786cb036a3cb94e7b67b5c4e2997044a093e0b9497992093806b/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/0179cd3d43a4a67435c056827bf3c02c683df099291a97ff20801055d770643b/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/285f5fe1e8a24d4840503b8300338721ee40a850824eee58ac2682901603791a/mounts/shm
 shm                                      64M   40K   64M   1% /var/lib/docker/containers/ca42db9be13e3d7a59cffb940360035789d3d49b914443f50e5f0f76978eee9b/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/937ff1d46a61d6fe2c1e21c599d3b564af958204bae36b1c7b4a7e84d99c5362/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/049f4c19fa76d8497676523ce26ea02c7cb329ac28628ad529c36a710c9632cd/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/e8e5a1b9ba373d4f12f4b6baf5cb23c2c4efa8cac0e826980d97be2a502a98ed/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/2623fc8d8f6f2bdb4416fc55e229528d6504c3c5e7f3b88481cb8e147d891dea/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/890b4816e11a1b4c6c43ed44f7167992f2d734177f36530eeff48dab278b82ce/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/eed9cac2b4b125b4f0186986a78812a64e7a04a2158b1888e5861532bde5a4d3/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/b5af0c0ead4d4f0b462fc40d3365962e9ebe01fd0fc7a7d56af51d70518a6a65/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/3cee45749c6e1803a08eb4f8519e8282444e4f42dc6d26b878df17f99a0b8fe2/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/701435a1158afeb7ef20110eb9e4c68b5f5425b44502ae0d2b5a3e31512d6b52/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/ea18c161a628279f4ddfe75747a90891b23cd235b35c05ddab1376ed25681dda/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/f9784bde10e73cac375633acf94bad1d05d55af5d08b2665b1ea5660e5b0f33d/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/66209c30b65b48f423c2065ef466d9732e82f8e8fc6f409e8b6718e5866e8724/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/703374ac4ddd81eba7405361c95129f577f8217cc0b6333bf69f87ed5c07e711/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/3adb36007758ad69754ebe826651cd31dae4805f1b97f61dd02a3d3e06c2a988/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/6c2e4aa8b2423cafc4f2ca1cbeac23d4bbb848bb3098bd969bb3aab93e6bf9e2/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/e23e47e79c549aabc1360d9e006ad35195e04b07baa9c7277bfae8784e711cb8/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/ea47844045bc1e3a7921550d720256fdf5f9889adc57ee8893269e92e2c7fe19/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/7c213d18cd10e05874d679d3dd654a2ed8654ab7e2ad849945debde529182942/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/841b50ff8171d5f75aa05d2c7bbcfa50b0725452c6ed4969931aababcd8ad2ae/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/2e8425a9c062554170fc58895603006d19a0df634576996e041b86c0af61eca6/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/b127a032b568b0b85caa1606b9815040ff183f79ffc4bebf7af8bb2612cb37e3/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/3936878d61b24d5d35c2175f9e5ef1cdebee3ee028ff3aea0cda5631c271b9c4/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/06c35da975e425ab636b445d82e1c12cc201edc5c727161f3543eb1dabce3b18/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/78b716a6397845b52958af3b25da19d307905672ebf55cd71d08b43c17687934/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/f417261bcb12b192ba9b3b6ddc45058b8f3f2b1030763e7a68f1794d7c6f238d/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/8cbfef03dbaca0011d7757987f2c6c304e054baa5ceab30d34b6d0bf78e9e3a0/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/46566c4add7cea1246fbb5aa0c8a1ac1028e5154b4c2e4555751f6ba261f6833/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/9a20195ff98b0ea60a6de7e15a9261805c7ecc06d9d7cda3dc087bc1abf96fec/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/8d381a882bc058de8d70c49d172b92c679257d1242a95546c3b75885ce2977fe/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/1e4d11d5fc283bed6e97c8fd96edf11d03432d9f84cf2f22e65b1c1ee294331a/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/5a624577061092a811550ab52afb010f9de04925aa77648c8d39050e08de8a02/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/8db84d209a31d27f7b5dc41d5b038a6cb91c095fc75663fc780d4f4c225d8b0f/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/13cb1856fdbc6de39ee9de52e3e2beb518a7b11e24ce4f829b802b93139c9864/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/6b0169817d2e45c56532e57f521654c9ae1af173afcb024b042ac9f83cc1511b/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/e202009179a467fb389bb4ac4b7bf4904d564aa6c362f367adc11207c62067a5/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/6c05f9bf143a91b996b4225784cf5d6d7dc9867ffb1d8cfc1d48e97e5b2b5372/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/da2cca456931abb3b71f0c814a1ce80b02db0a5d0c9b0a20092b41f26912adf2/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/02fce3f60343d16ba6c2ea2a70e2011029f4d024e0d0399f61ef33dbce4657fa/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/fbd61f3fe39eb2dd53222aa53520428001162cdaf5a34c31e01a98f59ab4c95d/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/9c4750718f37d3039209a1045462bb0b2dccdd2afa243fd735d7bcb2c5157b00/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/ab7c27241008f82c2d57196201f101acb906d92b19d027c986f5b900780fe069/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/9601a6f67cf8a793dbeada79972150861f054de76501bc86c4852cc52051e56e/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/e4f8b4defe04762713417c8583dd591a5ad788743f4a861cf2493442c4d9ca9d/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/fe61837ad3672d8d3f813fe3d697aafb627dcc2c3b62baf36a2c92906d093ee7/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/f226b8e0a4c93ed8a72851f02e1486abf2580a79e49e3db56c65d869365c469c/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/96ec4dddd2065e19f65cb33c8bc813f30ce54bba4ee477c69605bc30f996a495/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/b83a7b3f72cf671e39c0c4a155cc867f2fc6104e8eccbbefc9b5163b6e4b3d8d/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/4d365aead2a56b0214e07ce731a2de58df9f5a88d31e94defd7ce18055245919/mounts/shm
 shm                                      64M     0   64M   0% /var/lib/docker/containers/b25968751e5cce2f1130d171110260ef5f171501294296b1c360848426ac1746/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/6b7d4b5ca51722e7781afb3e58d4ad4e2ae2f4e361d6c12518020c97f07e9c86/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/0bab5afa964eeecf2269350040b4029bf7cfe3356b97708498fcfa2e1c3c9b48/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/809d1a05334640941a8230ada425d78ca38ce2e44e1c89b0a11ced0483b692bf/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/d96dfdf20c8eec9738e27e94d0e27f496c8e2b7b8bfef668e63d27ca597a201e/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/56f07de1de709f4220c727a0f19c2dd7e7618ad786e554df0ed41f9c9c154ab8/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/b4490f6708154b1f31c9f87b8b994f81054749b73571b56abb9ba48363666ef9/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/802aee67c14cf0ac5043c5e6f5898df314da5ee14e00aeac1a865afd00038c8d/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/da48e95ee24444e106410c21aa03d4f19dabfa6d9d920304d8ce212549604ba4/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/02c47dd4196b8b5d0c9118996d8c1e7085979513df090a6f66cb3b88f24a1a8c/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/fb5a559fd34b8204eb25ddacbca7b3d23d385ae4c59971c95c9b6634716ecfa2/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/e0872e5e184212766e685efed1d5aa4199c7fc21d68ceb1063fe68f153aec666/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/cc447f231bb39c56308b5e25cd79236b2541dde58d006544e59fded17d55503a/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/b0627a84addde00b526eae462d8b5a7628c47458b63e4980bf550698f7dad7f5/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/460556729ff3261f5f58a6b1e98ee410aaeae17e221db8be2bcdbe45282293e8/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/5dea05d94fa1e350bca031cdd341de7687c16936ff0ced3804d0d3d8bcca4804/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/e8ef67be360ed7a2f0afb3ee3d578924e4fcc045864f26ab7dde813821842489/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/af1e386ba9553a582e4e029f6859adb638adb8734b76cbb6346f747367de8bf4/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/e92520a15f8aa6e1d655c402590c5cae2b68010a1403aaaf60b4c2c475d70334/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/9ff023c64c8571c5fc151a4ab8a14a7d598b69de5d7126ad1df6d85925048c61/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/41fe98975f4597053315a86717bfb700953727bc5a49825fd253040a3a9a5c52/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/60f7cdb2c1d24d1460fef64683553bae97ea5feca95876b0b1ea14a533059871/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/06b9a52bc9a38da72ffa05633478ff7d9ccfb143868e455fa05c783bfafa4eba/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/957516e2c7fb65b4a3fc7593f4e19426805c7990711c2fd039f42cb9e82f31d1/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/c07daab4a3e6a5777a99ee194606924bf6e7a77cc95cb98d7a03743f26aed6e5/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/472ad8df7f50e7fc3ac1b358ec35930a395d0237ca07bb595dc1fa054e7dfc17/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/de6e595f64f39ca86be7b48a62a24be8fa0392467a2e6d997c14e1131868419d/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/b68cc4a9c6099674f68bd3b1fbf65fa5a8db9e7f322dc56e5a63e81c5d7a679a/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/d1fed308c34d2247119968e8ca588d51f4246794de25f3b3d026534a5e9054cb/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/06d3fe4065d5e729ededf56775b7c716b16c4dce496f6d1d081d5fff5620431c/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/e339f3349aabb8a12867f6663e73fbd82c7f5abf88446cfadb36183d8cc28f02/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/1747ae2b01eec3d911b71b6e92e248a3032a1378e9e928da15422c3322a9d00f/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/d346831603d0ace8546dfb85fa8f9cf56e5beef49577c7a8b9e4eb07bfca3985/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/d440acd2b95e2d3cc85300eec4dfeba7d440053c4ab5fb1111b1d81a19760a4c/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/9d41ba5eb81f7e90bcbd48f7fcf31a66fab6dbf224529b559c28c9cb2eca5c84/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/b9fbc4d5961de6eff659c96379fb7f54ccf01c1cb9165df1965c5367115d912e/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/8b5bd0bff47b9a90c53e95e3049abeb062bd352342ac8baaa36d95ae25877405/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/33b10618be46a65403c44798dd4e22c78aaf6ae1d635aae1ee8e642d17adea79/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/384038a338298fe84c71d9ea03a60f3b82b7d922c87c1ce91753e6015b6a5a75/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/752a59476845f79d2f6355825bbd4d20cdd8c584aea31c5a4e298633c9d46df3/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/6e8add53f7d8293a92f024f20e645357a815dbb2307a017a29e0bcf7ed27866d/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/ebb11b8f2abb122b12d8a758c32eb3d7c65de53a7f0742e8378ff730a7c5dd66/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/38e3f04db9b001c6b3d6f1bcd5b0b26ccff57d3761111c89ecf5541a92690ab5/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/34661b25e1353ff0e2b83aff8d8209b50dbe57ba2afcf3f1444cac21ff09fbf5/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/73386446b19088717035a7ba7b1c0503dc6644768e092388da6c0732a5ff6d2f/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/db4b0358f6eeb1b45790e7683bc0b6927fbe174a39a5917e99bc1fea8ba595f3/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/665564f8c56b0fa56d4a21aba45ba9217cb93d02adcf0f9b97739ce34a5a2b4e/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/40d2c57dad22fc9c76a66f8a9c4a1fa277122ab8e6fdb7695374d9ebb9342101/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/bbb2f02eaa4fd4f267b2b90d15d1bb5dcda83087ce9da0b5be00b29dd4150821/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/ec61e4ef5c2f2e913ff79971f9e3d71aea93af0a2807c9f4c3355dc980c8a678/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/410c466ee566d3c17a50e573332e30142a9d3ce2d167f694bed937d586301702/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/7968b1fca1f86880adf6dadea7428050c4c4decc65d10092641bbc91c1e0f65f/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/59912cd6eea8b3bc12da93f82277bfeba088718c7499a79a04258ff852777cfc/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/6f15be36125b178a2258f39c9c4fef4fb0a565aafb41c49667b8a3fefe60f015/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/14ca96c57cd67d36e52a2dc47395bf657f2e3918450a9390db5642f2b9ed992c/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/b1d2873e5adab3488f45ed361ada86f7664b0c66f91b6302d0ff723409856398/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/f07a1efe1ecf9f6696c66acf5b3e3c2ff70f15ac397ede216e32fb1f1cc6a29d/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/815ffd9039584212a6640b8afe879b02cb2b361331c72787b690a87a4d169e46/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/de5fadf8b1a63332e0731b3e42c972f57dac3e5c92b3b8beaf549438f63ea438/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/b85b046ed978fb3a7437b89ea04f3144e5c0a5a021ca4939c6a0fe54fa8c250d/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/68b0dae3d552ef561dd90899d80b2bd230b3fcf652a68288c005ba83c13deab0/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/48e7656b0280627854e57d78a2e39d967cd7fd6b1c518988239be27fbdae1672/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/27deb92044ed5f1870137c276a38dab2f207f927132c788a8a5a9e6527987cf3/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/1b2bd68ea370d777fed0eddaf26a50a747391df7a97c6535392b94398c192ec1/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/3b97fea0560f767d5ed432f5cfd00602990d11f7d7f8ae26997b43085f68fb1a/mounts/shm
 overlay                                 188G  136G   43G  77% /var/lib/docker/overlay2/252b92f20928c542203cd8f550c6a9fe42cfc78572a79b9bffc07a6b95f592bf/merged
 shm                                      64M     0   64M   0% /var/lib/docker/containers/1616e6e95a5b9ef5722b1e46f8e1d02c4852f500416e0b9540f8c80687cad110/mounts/shm

The df -h command output gives us a rough idea about the disk usage, but the output is messy with multiple directories in it's output.

So we sort the folder by usage using the du command. The below output sorts the folder usage in /var directory.

Executing du -xah --time --max-depth=3 /var | sort | grep G as current user
2025-02-19 18:33:47,529: output: du: cannot access '/var/lib/docker/overlay2/06baa7a4ce54f38fb31c9b125661c6015b4a2d3df56e7ce417989b90821d1434-init': No such file or directory
2025-02-19 19:37:26,626: output: du: cannot access '/var/lib/docker/overlay2/06baa7a4ce54f38fb31c9b125661c6015b4a2d3df56e7ce417989b90821d1434': No such file or directory
2025-02-19 19:37:39,698: output: 102G	2025-02-19 19:37	/var/lib
2025-02-19 19:37:39,698: output: 136G	2025-02-19 19:37	/var
2025-02-19 19:37:39,698: output: 1.5G	2025-02-19 19:37	/var/log/analyst-scheduler
2025-02-19 19:37:39,698: output: 24G	2025-02-18 18:20	/var/log/kibana/kibana.log
2025-02-19 19:37:39,698: output: 24G	2025-02-19 05:14	/var/log/kibana
2025-02-19 19:37:39,698: output: 2.7G	2025-02-17 23:33	/var/lib/lltic/lltic.db-wal
2025-02-19 19:37:39,698: output: 2.9G	2025-02-17 23:33	/var/lib/lltic/lltic.db
2025-02-19 19:37:39,698: output: 34G	2025-02-19 19:37	/var/log
2025-02-19 19:37:39,698: output: 4.0G	2025-02-19 19:37	/var/log/journal
2025-02-19 19:37:39,698: output: 4.0G	2025-02-19 19:37	/var/log/journal/b2063c0964355fc166a7a40e5f442a9d
2025-02-19 19:37:39,698: output: 4.0K	2021-05-07 06:26	/var/cache/man/CACHEDIR.TAG
2025-02-19 19:37:39,698: output: 4.0K	2021-05-11 18:50	/var/cache/fontconfig/CACHEDIR.TAG
2025-02-19 19:37:39,698: output: 5.5G	2021-01-29 00:28	/var/lib/kibana/headless_shell-linux
2025-02-19 19:37:39,698: output: 5.5G	2025-02-19 05:14	/var/lib/kibana
2025-02-19 19:37:39,698: output: 5.6G	2025-02-17 23:34	/var/lib/lltic
2025-02-19 19:37:39,698: output: 88G	2025-02-19 19:37	/var/lib/docker/overlay2
2025-02-19 19:37:39,698: output: 89G	2025-02-19 19:37	/var/lib/docker
2025-02-19 19:37:39,699: output: 
2025-02-19 19:37:39,699: Return code: 0

As per the output /var/lib/docker/overlay2 directory has consumed most of the disk space.

We further modify the du command to filter logs in /var/lib/docker/overlay2 directory  according to their size.

Executing du -xah --time --max-depth=4 /var/lib/docker/ | sort | grep G as current user
2025-02-20 23:28:14,324: output: 1.1G	2024-06-24 21:08	/var/lib/docker/overlay2/3ea9a9533f6f9b578561ebee1aa7672889f6e2604f85b9bb4e72da2a4d577537/diff/usr
2025-02-20 23:28:14,324: output: 1.1G	2025-01-23 15:34	/var/lib/docker/overlay2/3ea9a9533f6f9b578561ebee1aa7672889f6e2604f85b9bb4e72da2a4d577537
2025-02-20 23:28:14,324: output: 1.1G	2025-01-23 15:34	/var/lib/docker/overlay2/3ea9a9533f6f9b578561ebee1aa7672889f6e2604f85b9bb4e72da2a4d577537/diff
2025-02-20 23:28:14,324: output: 77G	2025-02-20 23:28	/var/lib/docker/overlay2
2025-02-20 23:28:14,324: output: 78G	2025-02-20 23:28	/var/lib/docker/
2025-02-20 23:28:14,324: output: 2.0G	2023-05-03 23:13	/var/lib/docker/overlay2/01da911bbdb96b41d44deea09f6eb8abe582228a63d85f408b34b950720a1e48/diff/usr
2025-02-20 23:28:14,324: output: 2.0G	2024-02-06 16:51	/var/lib/docker/overlay2/01da911bbdb96b41d44deea09f6eb8abe582228a63d85f408b34b950720a1e48
2025-02-20 23:28:14,324: output: 2.0G	2024-02-06 16:51	/var/lib/docker/overlay2/01da911bbdb96b41d44deea09f6eb8abe582228a63d85f408b34b950720a1e48/diff
2025-02-20 23:28:14,324: output: 4.0K	2020-09-18 21:05	/var/lib/docker/overlay2/l/NERMET3GHXA7T6VZ3OMET5TVDR
2025-02-20 23:28:14,324: output: 4.0K	2020-09-18 21:05	/var/lib/docker/overlay2/l/QNQ5V5BILA7OTJPCQBHHAGUZLF
2025-02-20 23:28:14,324: output: 4.0K	2020-09-18 21:05	/var/lib/docker/overlay2/l/WWLANRXCQ42BDOSTCFGAT4DZWB
2025-02-20 23:28:14,324: output: 4.0K	2020-09-18 21:06	/var/lib/docker/overlay2/l/JL3XXW2MRXUS3GGBXK677ZEZIF
2025-02-20 23:28:14,325: output: 4.0K	2020-09-18 21:06	/var/lib/docker/overlay2/l/XATN6BT7UWV2QEKSUHW5UG3IQ3
2025-02-20 23:28:14,325: output: 4.0K	2020-09-18 21:07	/var/lib/docker/overlay2/l/QXQ4743GRHDAPLRVY2IKJ35TMT
2025-02-20 23:28:14,325: output: 4.0K	2020-09-18 21:07	/var/lib/docker/overlay2/l/Z72TX42FXEXXGNDNF5OAP4MZMY
2025-02-20 23:28:14,325: output: 4.0K	2020-09-18 21:09	/var/lib/docker/overlay2/l/54SQHAWLEVQH5GI3O5IBLPGX4P
2025-02-20 23:28:14,325: output: 4.0K	2021-01-29 02:03	/var/lib/docker/overlay2/l/GQ5SPWE5PM2HXH3PC6PANRWDVQ
2025-02-20 23:28:14,325: output: 4.0K	2021-01-29 02:04	/var/lib/docker/overlay2/l/7LS6OLFCNYKXMQP7QPXGHND6JD
2025-02-20 23:28:14,325: output: 4.0K	2021-01-29 15:44	/var/lib/docker/overlay2/l/FI24AYXKGEJ3ZKVKLPD7XDBAGE
2025-02-20 23:28:14,325: output: 4.0K	2021-01-29 15:44	/var/lib/docker/overlay2/l/Y3DLITJJTCXYMCCPVRGQHY6XB2
2025-02-20 23:28:14,325: output: 4.0K	2021-01-29 15:54	/var/lib/docker/overlay2/l/5Q3OADUEBU4LRIHRA3GOHEEUJ6
2025-02-20 23:28:14,325: output: 4.0K	2021-01-29 15:54	/var/lib/docker/overlay2/l/DW5INVHPMHL6NMDLGZPGICRVHU
2025-02-20 23:28:14,325: output: 4.0K	2021-01-29 15:54	/var/lib/docker/overlay2/l/E77BMGTP3YDK2DU6LO2YL7MAIS
2025-02-20 23:28:14,325: output: 4.0K	2021-01-29 15:54	/var/lib/docker/overlay2/l/GU7USQVLMKTIHHLA3YXKENMOEN
2025-02-20 23:28:14,325: output: 4.0K	2021-01-29 15:54	/var/lib/docker/overlay2/l/HF5LBZIEGCKK7J5YGGK3IYZUGZ
2025-02-20 23:28:14,325: output: 4.0K	2021-01-29 15:54	/var/lib/docker/overlay2/l/SZKB6WOGI2TA4FVMLSTLERPWWW
2025-02-20 23:28:14,325: output: 4.0K	2021-01-29 15:55	/var/lib/docker/overlay2/l/FCR4P4YD3GDKWOTCPTWLHWWSKX
2025-02-20 23:28:14,325: output: 4.0K	2021-01-29 15:57	/var/lib/docker/overlay2/l/QQJGJSVEP6VZFQTL3RY6M4XO7F
2025-02-20 23:28:14,325: output: 4.0K	2021-01-29 15:58	/var/lib/docker/overlay2/l/4XTAAVNEDTBOLEXGHM2Q4CQ2UP
2025-02-20 23:28:14,326: output: 4.0K	2021-12-16 00:00	/var/lib/docker/overlay2/l/3YKRZNE6K4IRVSJMXLSXLWG3WA
2025-02-20 23:28:14,326: output: 4.0K	2021-12-16 00:48	/var/lib/docker/overlay2/l/FXKOCGYFSEWM5H6V4LENOXJ6UI
2025-02-20 23:28:14,326: output: 4.0K	2022-12-12 21:58	/var/lib/docker/overlay2/l/4QRQZAGLC3ASRHGWB7F32WJQ3X
2025-02-20 23:28:14,326: output: 4.0K	2022-12-12 21:58	/var/lib/docker/overlay2/l/GNQJCDNZBEEGMKR7IVYF4WPA5W
2025-02-20 23:28:14,326: output: 4.0K	2022-12-12 23:24	/var/lib/docker/overlay2/l/I6IVQUIGH6FQKENUMTV7VKFCPN
2025-02-20 23:28:14,326: output: 4.0K	2022-12-12 23:24	/var/lib/docker/overlay2/l/MKCRL7L7CWIDR4SGO3AYOBZFZA
2025-02-20 23:28:14,326: output: 4.0K	2022-12-12 23:24	/var/lib/docker/overlay2/l/OOKQSZ62KPI5EV7HCYBNCSGPQF
2025-02-20 23:28:14,326: output: 4.0K	2022-12-12 23:30	/var/lib/docker/overlay2/l/C2PHGJ3MYWS6AAEDRQKHHBQNKS
2025-02-20 23:28:14,326: output: 4.0K	2022-12-12 23:30	/var/lib/docker/overlay2/l/R6D5PKJGAQZW7OD5UMHFR3Z6ID
2025-02-20 23:28:14,326: output: 4.0K	2022-12-13 00:59	/var/lib/docker/overlay2/l/BKHB6GHEUQB2ECQ6LR5FRC3HKF
2025-02-20 23:28:14,326: output: 4.0K	2023-03-07 19:15	/var/lib/docker/overlay2/l/4LC2H7WPDTSTEKMX6WFCGYWX62
2025-02-20 23:28:14,326: output: 4.0K	2023-03-07 19:15	/var/lib/docker/overlay2/l/6RQ2B27SEU6N5W2W6GTTIAUA53
2025-02-20 23:28:14,326: output: 4.0K	2023-03-07 19:18	/var/lib/docker/overlay2/l/FMV3ZBSPWNZTUCCGVAMEU5VSQT
2025-02-20 23:28:14,326: output: 4.0K	2023-03-07 19:34	/var/lib/docker/overlay2/l/33Q5VO5GCOJLKDZMHRMMA45XIY
2025-02-20 23:28:14,326: output: 4.0K	2023-03-07 19:34	/var/lib/docker/overlay2/l/KLBB4JC6FJZ5XIHFGB5UXEOWHJ
2025-02-20 23:28:14,326: output: 4.0K	2024-02-06 16:47	/var/lib/docker/overlay2/l/6IVOTXTGIA6AVH7REB7PW4WZIK
2025-02-20 23:28:14,326: output: 4.0K	2024-02-06 16:47	/var/lib/docker/overlay2/l/IMVFW5AFONXG343ES7MOPKXHYB
2025-02-20 23:28:14,326: output: 4.0K	2024-02-06 16:47	/var/lib/docker/overlay2/l/PRSDZAGAJEYIPJBMFVONUH7XWK
2025-02-20 23:28:14,327: output: 4.0K	2024-02-06 16:47	/var/lib/docker/overlay2/l/ZRZGU25UNAVUOREIUKF7P6RR24
2025-02-20 23:28:14,327: output: 4.0K	2024-02-06 16:48	/var/lib/docker/overlay2/l/C6EANVLUCTB6RGW7XINE2COU4D
2025-02-20 23:28:14,327: output: 4.0K	2024-02-06 16:48	/var/lib/docker/overlay2/l/MUSVS2IOSYEZP67D6A5VOG636B
2025-02-20 23:28:14,327: output: 4.0K	2024-02-06 16:48	/var/lib/docker/overlay2/l/VGC3LGCQ4J3NDPJZB6UKLC2KWL
2025-02-20 23:28:14,327: output: 4.0K	2024-02-06 16:48	/var/lib/docker/overlay2/l/VGRQQYZA4VA7ZWR2R3TZEKD7B4
2025-02-20 23:28:14,327: output: 4.0K	2024-02-06 16:49	/var/lib/docker/overlay2/l/BHF6WRNFU4BSZUVHWQDGUT2KFH
2025-02-20 23:28:14,327: output: 4.0K	2024-02-06 16:49	/var/lib/docker/overlay2/l/RN6QPB7SK4IZYDGHTCOYGVXHKI
2025-02-20 23:28:14,327: output: 4.0K	2024-02-06 16:50	/var/lib/docker/overlay2/l/GUTAEPSGFEEJZZUQF5CB46HFMB
2025-02-20 23:28:14,327: output: 4.0K	2024-02-06 16:51	/var/lib/docker/overlay2/l/SWFHMALAPTQRXGINPION66L2AC
2025-02-20 23:28:14,327: output: 4.0K	2024-02-06 16:52	/var/lib/docker/overlay2/l/CBYULRYCCMIBD5TDEBWIH7TYGH
2025-02-20 23:28:14,327: output: 4.0K	2024-02-06 16:52	/var/lib/docker/overlay2/l/GWOGOJYNFCY7CHP2QHXNPVJJ7X
2025-02-20 23:28:14,327: output: 4.0K	2025-01-23 15:33	/var/lib/docker/overlay2/l/NX3EGKAMHHFKQGRRNHEPBSXZD2
2025-02-20 23:28:14,327: output: 4.0K	2025-01-23 15:33	/var/lib/docker/overlay2/l/RHNJPG36ZGFLTOWIE75GDNJJUX
2025-02-20 23:28:14,327: output: 4.0K	2025-01-27 17:35	/var/lib/docker/overlay2/l/EUXO7FGZTAWRCWKRU2SSRK4QXV
2025-02-20 23:28:14,327: output: 4.0K	2025-01-27 17:35	/var/lib/docker/overlay2/l/GMHLO7ZTVTNLSDL7IXHUMOHAPF
2025-02-20 23:28:14,327: output: 4.0K	2025-01-27 17:35	/var/lib/docker/overlay2/l/SYYARZ57HEUDYGEFCRK6OWVCMY
2025-02-20 23:28:14,327: output: 4.0K	2025-01-27 17:36	/var/lib/docker/overlay2/l/DZ7JDBKNGNFJTQWQ2ROS4QRJEB
2025-02-20 23:28:14,327: output: 4.0K	2025-01-27 17:36	/var/lib/docker/overlay2/l/IB6GKAZEZDA4MJW3KNH22CWZZU
2025-02-20 23:28:14,328: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/26IVWQXGFEKBXPZV2H2TROZ26B
2025-02-20 23:28:14,328: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/2OPGLY45RPC77ALAQLK4J2Z5GQ
2025-02-20 23:28:14,328: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/32M2KKDJT7IMNDGCXSJOEJ6FUD
2025-02-20 23:28:14,328: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/36JPKVPGNN3GM6YKD7QT4BRCRN
2025-02-20 23:28:14,328: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/3TEDONAXI3GSWQ4M3O6TZBROPI
2025-02-20 23:28:14,328: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/3YJWNAE4IBDQTHYZB5RL5AGZXT
2025-02-20 23:28:14,328: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/4ZONGLZKQPQGSOOKNGA3WMIK4V
2025-02-20 23:28:14,328: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/5AYWCUNPEWCOFDIAD2HKAG3TTQ
2025-02-20 23:28:14,328: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/5O6AEKYMTEOTGXFGNXXPKYQZQV
2025-02-20 23:28:14,328: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/5TK4ZV23XWGEDZXJZIFKUGUW54
2025-02-20 23:28:14,328: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/5ZTOYTRLODZGEIX2WRPOUG4WWA
2025-02-20 23:28:14,328: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/ATFUPT3FEDAGIWAJIKKMJ7ZXAI
2025-02-20 23:28:14,328: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/BL54RGIX6SNHZK447WUR4V5AK2
2025-02-20 23:28:14,328: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/CAFWX6VC3IPYALV5GGMCYVQSSI
2025-02-20 23:28:14,328: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/EE7JYG36MZ4XMN2XG2HGK67JHI
2025-02-20 23:28:14,328: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/EFH3YO3FWYVIQTAPQQV7TEGPHK
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/EMM7VHY3LJS3FMGTCBNPVPD3BE
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/FFPZFENZ6XYJBXKGOBOXLKYKJ5
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/FLBSMF7M5SPTONSMNEHVGWPF2S
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/FOPQYO3GPYGJL5J5CRVLSOVTSJ
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/G2IHQTFW7FUYU2723MVJ4RMZ5E
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/GCTW7LDCNA2GVW7YNWFI5C7DFF
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/GCVGYJFENVQHXLBLKPOMZJS572
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/GFEAJIKMGV26PCT2EFKQOUJWMI
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/GFUZNZVSZWKVWVCBCAN3VOIOLQ
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/GIPT45S5FTURU3CG6BVYULMNGV
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/HAVGM4NSJ7TVLM67F2K4Z66L4I
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/K7OEZGWQZROKGYM2GSIFAVPRZJ
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/M2LZBRJA7CVVGKXACXG4VAJCDH
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/MUWRMQY7WPWWPFRJYG3HB72ZVL
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/NEOUKEBPHVSPPF3V6MNNJK4GXQ
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/O5KZMGMEWSD23UH4YK4EE24DAW
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/OGBC3B5FEX3GMEKDS5EZIJ5GD2
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/OJFHP2MVZHZRWRUGETKDVWO5WX
2025-02-20 23:28:14,329: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/ON4E4BREXQCSG7WSDPWC4T7X4C
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/OPC5SZ3E37GVTOVH3RRH6ETDIA
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/OS5KIWJSYQFIYYLZSIGYSDNRC5
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/PQ77BN6IXH6BA4KG4LEDLIXR2U
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/RRJ32IZXWPSPHRRJLIAG7SV253
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/SBKDS6P4PTRG5ZFBIIVFH3XXDZ
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/SF5RPGCMM5CBOEQREPHZ2WWWOJ
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/TGF6KVUC4G2THNZ7EQIS4U53K7
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/U27CFV4NNGFHEUV3FA5REMOP3E
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/UNGXZREJYVLE42RNFJDJBRYWT5
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/XLWJOYOEA7HWJ2BFVSDWYGCL3X
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/Y2AGPQGSHDYDDXF3TMLEFIA7K2
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/YEXFNLDAHXTVRV73DK6MLGL46Y
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/YS5C5KG53YI6SEUQTPNZNOACHR
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/Z34HSNGD3LDMXPXL3PUNXW2L6O
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/ZQFIQ7MU2QUUIWPYQEGU3ZWIBG
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/ZTA5XHZB4LGGEBMC6QHMKUF375
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/ZU3OM5NL2GJKZJGUNMLPFQFYSG
2025-02-20 23:28:14,330: output: 4.0K	2025-01-27 19:13	/var/lib/docker/overlay2/l/ZXLAANFUGSCSZN4QDL2VPXGJ6P
2025-02-20 23:28:14,331: output: 4.0K	2025-02-11 20:29	/var/lib/docker/overlay2/l/72UIN23GCDWXBHKW2ITUX5L764
2025-02-20 23:28:14,331: output: 4.0K	2025-02-11 20:29	/var/lib/docker/overlay2/l/AILLXB5VL3PKXPN276YN3JZEGG
2025-02-20 23:28:14,331: output: 4.0K	2025-02-11 20:29	/var/lib/docker/overlay2/l/DVS3ZPWWLSE76PPGLMBTPCNIYL
2025-02-20 23:28:14,331: output: 4.0K	2025-02-11 20:29	/var/lib/docker/overlay2/l/FJF7NO7SM3G77E5H25SDQS4V4B
2025-02-20 23:28:14,331: output: 4.0K	2025-02-11 20:29	/var/lib/docker/overlay2/l/FW2NSF7566BP7HZ5VHWIGFQ4GH
2025-02-20 23:28:14,331: output: 4.0K	2025-02-11 20:29	/var/lib/docker/overlay2/l/GDONSQ7MD2ORYU27MLNKE3YN2B
2025-02-20 23:28:14,331: output: 4.0K	2025-02-11 20:29	/var/lib/docker/overlay2/l/GJSG3YWP3X4NEO3HBRCAAOJ7MO
2025-02-20 23:28:14,331: output: 4.0K	2025-02-11 20:29	/var/lib/docker/overlay2/l/HGCOTEZ2Y6U3L3S5D6QMKXAALJ
2025-02-20 23:28:14,331: output: 4.0K	2025-02-11 20:29	/var/lib/docker/overlay2/l/LKSG6SPXURDAQEWGRPEPWNUXX4
2025-02-20 23:28:14,331: output: 4.0K	2025-02-11 20:29	/var/lib/docker/overlay2/l/QQCFBWY4DQX747NBPS5CTOGC3T
2025-02-20 23:28:14,331: output: 4.0K	2025-02-11 20:29	/var/lib/docker/overlay2/l/RXZTHAVYMA7SPGFFDTKG6T6FX4
2025-02-20 23:28:14,331: output: 4.0K	2025-02-11 20:29	/var/lib/docker/overlay2/l/TTIIG5EAMIJIW3ROLHFX6UK5VQ
2025-02-20 23:28:14,331: output: 4.0K	2025-02-11 20:29	/var/lib/docker/overlay2/l/WRGXZEUUUMZ5M7JFPYJMR3NNSV
2025-02-20 23:28:14,331: output: 4.0K	2025-02-11 20:29	/var/lib/docker/overlay2/l/Z2MDELUY4IT46FKO32F4YEGHDX
2025-02-20 23:28:14,331: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/63ZGUW2N3LWM2DRLNRPLOGJ3VG
2025-02-20 23:28:14,332: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/64QP5LA6E4CQW4JDJN5H6NO5AG
2025-02-20 23:28:14,332: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/7GLT4RZDCOO3JW4GURW4DPUJLA
2025-02-20 23:28:14,332: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/AFA27AJ75TS4XU4TNYGD6UVXAO
2025-02-20 23:28:14,332: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/ASTZQIGCYVA6XHSVDO6RXMHI5Q
2025-02-20 23:28:14,332: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/CJKIS5DCNFWFWYGTRKMWCS2UYM
2025-02-20 23:28:14,332: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/CJWQUFXVEUZCGHP3AY2QQOKY2P
2025-02-20 23:28:14,332: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/E5TD4GALACE4KCTAWQFQWQEJB3
2025-02-20 23:28:14,332: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/EDZCJR6RP67SUGKGA3SYPGSWHO
2025-02-20 23:28:14,332: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/EGZOFIFJ2E6OVGY6LKRXMKBJWN
2025-02-20 23:28:14,332: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/HOCFCQQGANKOVBTMRCZOEBAL3V
2025-02-20 23:28:14,332: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/JPH4PQQMJLGHUCQPWXTXNUKIPM
2025-02-20 23:28:14,332: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/NBPPJGRX5SLRAUNRSKTMGBYBFL
2025-02-20 23:28:14,332: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/O3JSCXEGWVUMOPH52VCYTG226U
2025-02-20 23:28:14,332: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/UKMNAIIIFUGUNE433LH4HA6IJE
2025-02-20 23:28:14,332: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/VLUMGEIT6C4YQZ4MYQJ2Y2DMRL
2025-02-20 23:28:14,332: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/VY33UDAALYG22IA75JVCUN6DTY
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/WRSGEQWEHKFGNT6MJ5DGLK6M35
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/ZAFOULNXEPZ4QCWP7FBTJLGLND
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:30	/var/lib/docker/overlay2/l/ZZZMB4JYP7TEB4UC3GHLWO36FH
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/2HTU3AEGGYZ2CGSSY7CC7CLJK2
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/35JW475WPWYVGR3FRYGFJAFFZ3
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/3WODBHKEEM6RJ44GHNP7TMF6UP
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/47XUEF5GDEGK4E7ZCRVOJRJUXR
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/5LWB2BM7ECZKQRZZRPMHJ3EGBC
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/634KRK6U7TXQYMUPGQ57QMBP3R
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/67PJ52QVFGAOYVBQJ6L3UFCAPE
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/6JDVH4YXJV4FEMT776WDIMGRAU
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/7IL4NGAUORVGEYLH4XD5DSGANN
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/AGKTOLTZNNWEBWCPFIBBQM3JPW
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/AX3ZKRU3ZKPGCA4WLFSR2LRR7B
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/B3NT4CF6OKLJJXCCGL5BN6AHOI
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/BIXQXZY62CPDTETJ3LARXJJANG
2025-02-20 23:28:14,333: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/EHPFSF56SAALMFZSVAS2QOVIBG
2025-02-20 23:28:14,334: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/GVQEEBQNFWC2AOLIQ7MMWQXZEW
2025-02-20 23:28:14,334: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/HPPIMGBJGVTABMCHUKXEJVSYTA
2025-02-20 23:28:14,334: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/MSPRHBH3TQGT2HCDJ7CVOPUZZL
2025-02-20 23:28:14,334: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/PDLBJHYSD32SGXAVGZEQBADEYH
2025-02-20 23:28:14,334: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/Q66ZWHXMYZP2P2Z555KGMMEGYN
2025-02-20 23:28:14,334: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/U5JIBH657LUCE224GGWUN6KLGA
2025-02-20 23:28:14,334: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/YC3OBCI3GM5DPPLTHLP7N3NFE3
2025-02-20 23:28:14,334: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/YC6M2EUQAPVJHM4UHP4HPGINDJ
2025-02-20 23:28:14,334: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/YIITIA5T5D7TO3RXX5H5K5DSGE
2025-02-20 23:28:14,334: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/YOSGHKWW62B6ATWKGYY2QEORL3
2025-02-20 23:28:14,334: output: 4.0K	2025-02-11 20:31	/var/lib/docker/overlay2/l/YTGNKENYIZH7WCT27M4ELX6W3K
2025-02-20 23:28:14,334: output: 4.0K	2025-02-13 01:28	/var/lib/docker/overlay2/l/VT4I3DBS2K5ESW4GRVQDASP4VM
2025-02-20 23:28:14,334: output: 4.0K	2025-02-13 01:28	/var/lib/docker/overlay2/l/WYWSV3CG53E77I3KDBLCPGSXKV
2025-02-20 23:28:14,334: output: 4.0K	2025-02-18 18:02	/var/lib/docker/overlay2/l/BILCIAGCQBEZVD5T6K3NPSU2VS
2025-02-20 23:28:14,334: output: 72G	2025-02-12 19:54	/var/lib/docker/overlay2/a33ba8cd263b2f0c4b787228780e2c99886623c9d7bf8ac31895ae98cde71b4a
2025-02-20 23:28:14,334: output: 72G	2025-02-12 19:54	/var/lib/docker/overlay2/a33ba8cd263b2f0c4b787228780e2c99886623c9d7bf8ac31895ae98cde71b4a/diff
2025-02-20 23:28:14,334: output: 4.0K	2025-02-18 18:02	/var/lib/docker/overlay2/
2025-02-20 23:28:14,335: output: 
2025-02-20 23:28:14,335: Return code: 0

The output may vary a bit depending on the appliance or environment, but if we see the last container which is using the 72G of the disk space is the cause of concern.

We then check the process running in docker using the command docker ps.

Executing docker ps
 CONTAINER ID        IMAGE                                                   COMMAND                  CREATED             STATUS                            PORTS                                              NAMES
 d96dfdf20c8e        analyst-scheduler-data-retention:installed-via-puppet   "/envoy-preflight /e?"   26 hours ago        Up 26 hours                                                                          analyst-scheduler_analyst-scheduler-data-retention-all_1
 0bab5afa964e        analyst-scheduler-api:installed-via-puppet              "/entrypoint.sh"         26 hours ago        Up 26 hours                       0.0.0.0:4004->4000/tcp, 0.0.0.0:4504->5000/tcp     analyst-scheduler_analyst-scheduler-api_1
 52fd8a24009b        llmonitoring-daemon:installed-via-puppet                "/entrypoint.sh"         6 days ago          Up 6 days                         0.0.0.0:11302->11302/tcp                           llmonitoring-service_llmonitoring-service_1
 df043b87246b        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_llanta_facts-dkr_1
 46566c4add7c        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_llanta_alerts-dkr_1
 9c4750718f37        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_network-ioc-feed-dkr_1
 66209c30b65b        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_ioc_storage_processor-dkr_1
 8db84d209a31        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_host_id-dkr_1
 1e4d11d5fc28        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_detection_entity-dkr_1
 6c05f9bf143a        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_batch-analysis-completed-dkr_1
 b25968751e5c        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_analysis-completed-dkr_9
 7c213d18cd10        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_analysis-completed-dkr_10
 8d381a882bc0        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_analysis-completed-dkr_4
 13cb1856fdbc        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_analysis-completed-dkr_6
 e23e47e79c54        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_analysis-completed-dkr_7
 2d7c5e5c61aa        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_analysis-completed-dkr_1
 ea47844045bc        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_analysis-completed-dkr_5
 074e7ff17f23        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_analysis-completed-dkr_2
 3936878d61b2        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_analysis-completed-dkr_3
 78b716a63978        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_analysis-completed-dkr_8
 2a239d37ac6b        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_raw-events-dkr_1
 2e8425a9c062        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_monitored_host-dkr_1
 f417261bcb12        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_breach-correlation-runner-dkr_1
 e202009179a4        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_incidents-dkr_1
 71127fb8469b        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_events-dkr_1
 22038ab463e3        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_breach-correlation-scheduler-dkr_1
 e8e5a1b9ba37        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_breach-dkr_1
 9a20195ff98b        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_session-tracker-dkr_1
 049f4c19fa76        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_reprocessing-dkr_1
 6be0a102762c        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_pcaps-dkr_1
 fbd61f3fe39e        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_mail_message_event-dkr_1
 3adb36007758        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_mail_attachments-dkr_1
 eed9cac2b4b1        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_inserted-pcaps-dkr_1
 ea18c161a628        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_ids_downloads-dkr_1
 7d4091c63ba9        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_ids_downloads-dkr_2
 3cee45749c6e        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_host_identifiers-dkr_1
 1616e6e95a5b        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 11 hours                                                                          llupload_queue_worker_register-completion-request-dkr_1
 4d365aead2a5        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_analyzed_ids_urls-dkr_1
 285f5fe1e8a2        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_tippingpoint-notifications-dkr_1
 841b50ff8171        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_slack-notifications-dkr_1
 8a1ef6bbf9ba        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_proxy-notifications-dkr_1
 b127a032b568        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_streaming-notifications-dkr_1
 96ec4dddd206        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_siem-notifications-dkr_1
 da2cca456931        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_httppost-notifications-dkr_1
 6b0169817d2e        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_email-notifications-dkr_1
 f226b8e0a4c9        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_notifications-dkr_1
 8cbfef03dbac        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_user-actions-dkr_1
 701435a1158a        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_forward-appliance-status-dkr_1
 fe61837ad367        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_forward-appliance-monitoring-dkr_1
 06c35da975e4        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_audit-log-dkr_1
 64f2deb2acc7        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_appliance-status-dkr_1
 e4f8b4defe04        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_appliance-monitoring-dkr_1
 9601a6f67cf8        llupload-worker:installed-via-puppet                    "/tini -- /entrypoin?"   7 days ago          Up 6 days                                                                            llupload_queue_worker_analysis-history-dkr_1
 27deb92044ed        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-sharded-av-timeout-0_1
 0179cd3d43a4        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-submission_completion_2
 02eacac229df        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-submission_completion_1
 da48e95ee244        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-sharded-signature_check-timeout-0_1
 02fce3f60343        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-cloud_analysis-completed_backend_task_1
 7dbef8ffc7a5        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-cloud_analysis-completed_backend_task_2
 410c466ee566        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-sharded-avg-timeout-0_1
 5a6245770610        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-hook_url_research_malscape_upload_1
 41fe98975f45        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-sharded-manual_score-processing-0_1
 5f29face0ca5        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-requeue_1
 4b38b5c5dbb9        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-hook_customer_shard_1
 38e3f04db9b0        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-llpcapapi-processing_2
 3a4a8cff939e        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-analyst-completed_backend_task_1
 703374ac4ddd        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-hook_customer_shard_2
 4cbe552be4fb        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-analyst-completed_backend_task_2
 e92520a15f8a        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-analyst-processing_2
 e8ef67be360e        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-llpcapapi-processing_1
 14ca96c57cd6        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-sharded-global_throughput_stats-0_1
 bbb2f02eaa4f        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-signature_check-processing_2
 8b5bd0bff47b        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-unpacker-processing_3
 b4490f670815        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 18 hours                                                                          malscape-service_malscape-service-processing-analyst-processing_1
 ab7c27241008        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-sharded-cloud_analysis-completion-0_1
 de5fadf8b1a6        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-signature_check-processing_1
 de6e595f64f3        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-unpacker-processing_4
 c07daab4a3e6        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-sharded-classification-timeout-0_1
 9d41ba5eb81f        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-unpacker-processing_1
 cc447f231bb3        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-sharded-analyst-completion-localhost-0_1
 f07a1efe1ecf        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-unpacker-processing_2
 59912cd6eea8        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-backend_scoring_4
 6c2e4aa8b242        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-submission_priority_stats_1
 665564f8c56b        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-task_scoring_2
 460556729ff3        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-backend_scoring_3
 73386446b190        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-task_scoring_1
 384038a33829        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-backend_scoring_2
 68b0dae3d552        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-backend_scoring_1
 c47233a0f4e9        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-hook_file_research_malscape_upload_1
 3b97fea0560f        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-sharded-unpacker-timeout-0_1
 b5af0c0ead4d        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-hook_stats_global_1
 d346831603d0        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-sharded-llpcapapi-timeout-0_1
 d1fed308c34d        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-sharded-cloud_analysis-timeout-0_1
 6e8add53f7d8        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-cloud_analysis-processing_1
 937ff1d46a61        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-av-processing_2
 e339f3349aab        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-sharded-analyst-timeout-0_1
 06b9a52bc9a3        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-cloud_analysis-processing_2
 fb5a559fd34b        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 17 hours                                                                          malscape-service_malscape-service-processing-queue_size_stats_1
 2623fc8d8f6f        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-sharded-analyst-priorities-0_1
 f9784bde10e7        malscape-service-processing:installed-via-puppet        "/entrypoint.sh"         3 weeks ago         Up 6 days                                                                            malscape-service_malscape-service-processing-av-processing_1
 890b4816e11a        malscape-service-api:installed-via-puppet               "/entrypoint.sh"         3 weeks ago         Up 6 days                         0.0.0.0:4003->4003/tcp, 0.0.0.0:4503->5000/tcp     malscape-service_malscape-service-api_1
 ca42db9be13e        lltic-daemon:installed-via-puppet                       "/entrypoint.sh"         12 months ago       Up 6 days                         0.0.0.0:12346->5101/tcp, 0.0.0.0:12345->5102/tcp   lltic-daemon_lltic-daemon_1
 b83a7b3f72cf        llupload-frontend-command-daemon:installed-via-puppet   "/tini -- /entrypoin?"   12 months ago       Up 6 days                                                                            llupload_llupload-frontend-command-daemon_1
 17ebf3db395f        avbd-scan:installed-via-puppet                          "/envoy-preflight /e?"   12 months ago       Restarting (112) 35 seconds ago                                                      malscape-service_avbd-scan_1
 6b199c3ee57b        llstatsreports-send-reports:installed-via-puppet        "/entrypoint.sh"         23 months ago       Restarting (1) 1 second ago                                                          llstatsreports_llstatsreports-send-reports_1
 bcc630a64d96        llpushserver:installed-via-puppet                       "/entrypoint.sh"         23 months ago       Up 6 days                         0.0.0.0:5000->5000/tcp                             llpushserver_docker_llpushserver_1
 fed786039611        registry-lastline:installed-via-puppet                  "/lastline_entrypoin?"   2 years ago         Up 6 days                         127.0.0.1:6000->5000/tcp                           registry-cache_docker-registry-cache-localhost_1

We may see more or less process running, depending on the appliance and usage.

Once we have the container ID's, inspect each container ID using command docker inspect "container ID" | grep overlay. Until we find the container we're looking for. You can expect the output as below

Executing docker inspect 6b199c3ee57b |grep overlay
         "Driver": "overlay2",
                 "LowerDir": "/var/lib/docker/overlay2/a33ba8cd263b2f0c4b787228780e2c99886623c9d7bf8ac31895ae98cde71b4a-init/diff:/var/lib/docker/overlay2/351c4495446280f12cfba45c7cf830c24323d1125c64202402d344d66bf682db/diff:/var/lib/docker/overlay2/83ae14d85a315d38d99e45fa81abc70e006107d99a6ee1ff03f2609484757ce4/diff:/var/lib/docker/overlay2/216b049ffcba318b70052387642d7cc70335e6e011ca36c36027e99a647e966b/diff:/var/lib/docker/overlay2/d8bf344c7ee29036eeeb204a3029d6b3288b9463e2dde9b59c745b64b812fb69/diff:/var/lib/docker/overlay2/24ba3127ad05e0509a67da0cd10bcc7ac6a2394366e560d93d94ec8b52c11935/diff:/var/lib/docker/overlay2/b6ad20f707e8b007e0ad6b4069b2570a362680f4a0b4cbe204fb431ed8cc8264/diff:/var/lib/docker/overlay2/ebd4310296c4562a130f2ad9bb7df25ac0cbeb33a9cafc5f7523d9555ae2f747/diff:/var/lib/docker/overlay2/cd5f3c37a9a8e15854dfb7dee2ce8c20b5cb5ae92d9b3833773c42973fdcd020/diff:/var/lib/docker/overlay2/cc8f820ad110a8380ae59d29fa1cde812f168b33c15f2f4c5e56694d257ef977/diff:/var/lib/docker/overlay2/b54dff99e394de0022b9d0369071eacbe3c14a3416ff7f362683d315b2225e0b/diff:/var/lib/docker/overlay2/c65ba76db324a49bdc4b7d40f869a66fdc92d0e151b7a2a13c0a5ddfaddb4cd7/diff:/var/lib/docker/overlay2/973ed19a50bdf28a6f94555f0050b1364f6fcfa430e8c56b721be53a90439e44/diff",
                 "MergedDir": "/var/lib/docker/overlay2/a33ba8cd263b2f0c4b787228780e2c99886623c9d7bf8ac31895ae98cde71b4a/merged",
                 "UpperDir": "/var/lib/docker/overlay2/a33ba8cd263b2f0c4b787228780e2c99886623c9d7bf8ac31895ae98cde71b4a/diff",
                 "WorkDir": "/var/lib/docker/overlay2/a33ba8cd263b2f0c4b787228780e2c99886623c9d7bf8ac31895ae98cde71b4a/work"
             "Name": "overlay2"

As we found the container ID which is responsible for high disk usage, let's find out the service responsible for it using command docker ps | grep "Container ID".

Executing docker ps | grep 6b199c3ee57b
6b199c3ee57b        llstatsreports-send-reports:installed-via-puppet        "/entrypoint.sh"         23 months ago       Restarting (1) 54 seconds ago                                                        llstatsreports_llstatsreports-send-reports_1

The llstatsreports-send-reports was a complete different container and a different approach was used to isolate the issue.

If we take another example such as the rapid_analyst-sdk-analysis-completion utilizing a lot of space.

The we can restart the rapid service in the appliance using command "service-lastline rapid restart", to restart the containers/server.

Once the restart is complete the space would gradually reduce depending on the disk utilization.

If any of the above steps don't work, please reach out to the VMware vDefend Network Detection and Response support team for further assistance.

Additional Information

In case if you're unable to identify which service to restart or if you have restarted the service and the problem persists please reach out to the VMware vDefend Network Detection and Response support team for further assistance.