topic Re: New Expedition Install on Ubuntu 20.04 - Disk Usage in Expedition Discussions

New Expedition Install on Ubuntu 20.04 - Disk Usage

dparrish-better — Wed, 23 Feb 2022 12:25:00 GMT

Hello!

I recently rebuilt my Expedition Server on a new Ubuntu 20.04 with the new instruction. Couple of questions:

The new installation guide recommends a 3 disk setup:

Disk 1: OS (6GB)
Disk 2: Data (150GB)
Disk 3: PALogs (4TB)

When installing in this manner you immediately get a warning in the Expedition GUI that the OS Drive where "/home/userSpace" is running out of Disk Space (Not great for a net new install)

I rebuilt the server again with an OS Drive of 10GB which initially corrects this issue
However, as soon as you create a project or import a Device, this warning returns, as it appears Project Files and Devices are also stored in the "/home/userSpace" directory....
- Is there a way to change where this directory lives? Why wouldn't the system be using the Disk 2 or Disk 3 which has significantly more space, as the installation guide would lead you to believe Disk 1 is for the OS only?

What is the purpose of Disk 2? My Devices Dump their logs to Disk 3 (PALogs - 4TB). Once the logs reside there, the ML Engine processes them and then deletes them. A such, when is Disk 2 (Data - 150GB) ever used?

Thanks in advance for the help!

Re: New Expedition Install on Ubuntu 20.04 - Disk Usage

azuniga — Wed, 23 Feb 2022 16:45:44 GMT

Hello @dparrish-better

You may have run out of space because the root folder path is filling up. The reason for the larger hard drive on the log side is because some people parse a massive amount of firewalls and some of these firewalls ingest tons of data so at the very least 100gb would be a recommendation. Also not all customers want their data deleted after some want it compressed and saved on the machine.

Re: New Expedition Install on Ubuntu 20.04 - Disk Usage

dparrish-better — Thu, 24 Feb 2022 11:51:25 GMT

@azuniga Appreciate the response; however, that doesn't directly answer the question. Per the Expedition Install Guide it says the OS disk only needs to be 6GB. That will be undersized if this is where Device/Project folders reside, as Ubuntu 20.04LTS3 with updates is already almost 6GB.

Is there a way to change the directory where Project/Device data is stored? It currently goes to "/home/userSpace" - which is on the OS Disk