NFS archive storage full in Aria Operations
Article ID: 395330
Updated On:
Products
Issue/Introduction
An alert is received from Aria Operations for Logs cluster stating that the NFS archive will be full.
Environment
Aria Operations for Logs 8.x
Cause
The NFS endpoint configured for log archival has reached or is about to reach capacity.
Resolution
There are two solutions to this issue;
- Delete old archived logs from the NFS endpoint
- The format of the archived data is as below, where the directory names reflect the date of archival;
-
/backup/2025/04/25/16/########-####-####-####-##########/data.blob
-
- Start with the oldest date and remove directories until you have reached the desired capacity.
- The format of the archived data is as below, where the directory names reflect the date of archival;
- Add more storage to the NFS endpoint.
Additional Information
When an NFS endpoint reaches 100% capacity, it can cause an Operations for Logs cluster to go down.
The reason for this is due to the way buckets of logs are copied when archived; one copy remains in the cluster storage, and the other is sent for archiving. If the endpoint is full, the copy due to be sent to the NFS endpoint remains on the cluster storage, eventually causing the '/storage/core' partition to fill, and thus bringing the cluster down.
Below are links to documentation regarding configuring the NFS archiving, event lifecycle and the format of the NFS archive.
Feedback
