NSX Manager disk becomes full with IDFW data

Products

• VMware NSX

Issue/Introduction

Symptoms:

• NSX Manager disk /common partition becomes full.
• Running the show filesystems command returns entries similar to :
  
  Filesystem Size Used Avail Use% Mounted on
  /dev/root 5.6G 1.6G 3.7G 31% /
  tmpfs 3.0G 236K 3.0G 1% /run
  devtmpfs 3.0G 0 3.0G 0% /dev
  /dev/sda6 44G 42G 2G 95% /common
  /dev/loop0 16G 67M 15G 1% /common/vdisk_mnt
   
• NSX Manager postgres database process may stop.

Environment

VMware NSX for vSphere 6.2.x
VMware NSX for vSphere 6.3.x
VMware NSX for vSphere 6.1.x

Cause

Irrespective of the IDFW rules being used, Guest Introspection and Event Log Servers detected login events are stored in the NSX Manager database and retained in the database for 30 days after they expire. In environments with a large volume of login activity, the database may grow and impact space on the NSX Manager disk.

 

Resolution

This issue is resolved in:

• VMware NSX for vSphere 6.2.9
• VMware NSX for vSphere 6.4.0

To work around this issue if you do not want to upgrade, contact Broadcom Support and note this Knowledge Base article ID (318763) in the problem description.