Kaspersky Unified Monitoring and Analysis Platform
3.4
English

Contents

Storage partition was deleted automatically or moved due to exceeding the storage capacity.

In KUMA, you can set a condition for storage partitions to have the disk partition automatically moved or deleted if the configured maximum size of such a partition is reached or exceeded. The maximum storage capacity can be configured in one of the following ways:

  • Specify a percentage of the entire disk partition where the storage is installed.
  • Set the size of the disk partition in GB.

If the condition is checked and it is found that the size of the storage is equal to or greater than the configured size in percent or GB, an audit event is generated and the storage partition is moved or deleted.

Event field name

Field value

DeviceAction

If the storage partition size is specified as a percentage of the disk size, the value is applied retention policy by percent.

If the storage partition size is specified in GB, the value is applied retention policy by GB.

EventOutcome

succeeded or failed

Name

Storage name | Tenant of the partition being moved or deleted | Name of the space to which the partition belongs.

DeviceCustomDate1

Partition creation date.

DeviceCustomDate1Label

date of partition

SourceServiceName

scheduler

DeviceCustomString1

Node ID.

DeviceCustomString1Label

nodeID

Message

If moved:

  • If EventOutcome = succeeded, the moved partition data to cold storage message is displayed.
  • If EventOutcome = failed, the move partition data to cold storage failed: error description> error message is displayed.

If deleted:

  • If EventOutcome = succeeded , the deleted partition data message is displayed.
  • If EventOutcome = failed, the delete partition data failed: error description> error message is displayed.

DeviceCustomNumber1

Storage partition size in bytes.

DeviceCustomNumber1Label

size

DeviceCustomNumber2

Number of events in the storage partition.

DeviceCustomNumber2Label

events

Page top
[Topic 300065]