df -h on all Aria Operations for Logs appliance(s) will show that the root partition is 100%, which can happen on all appliances or any of them. Causes by: java.security.cert.CertificatedExpiredException: NoAfter: .....Aria Operations for Logs 8.18.x.
(typically could be sda4 or sda5 ), use KB Large File Sizes of /var/log/messages and /var/mail/root Causing Root Partition to Fill Up in Aria Operations for Logs