New Expedition Install on Ubuntu 20.04 - Disk Usage

[dparrish-better]

Hello!

I recently rebuilt my Expedition Server on a new Ubuntu 20.04 with the new instruction.  Couple of questions:

The new installation guide recommends a 3 disk setup:

• Disk 1: OS (6GB)
• Disk 2: Data (150GB)
• Disk 3: PALogs (4TB)

When installing in this manner you immediately get a warning in the Expedition GUI that the OS Drive where "/home/userSpace" is running out of Disk Space (Not great for a net new install)

• I rebuilt the server again with an OS Drive of 10GB which initially corrects this issue
• However, as soon as you create a project or import a Device, this warning returns, as it appears Project Files and Devices are also stored in the "/home/userSpace" directory....
  
  • Is there a way to change where this directory lives?  Why wouldn't the system be using the Disk 2 or Disk 3 which has significantly more space, as the installation guide would lead you to believe Disk 1 is for the OS only?

What is the purpose of Disk 2?  My Devices Dump their logs to Disk 3 (PALogs - 4TB).  Once the logs reside there, the ML Engine processes them and then deletes them.  A such, when is Disk 2 (Data - 150GB) ever used?

Thanks in advance for the help!

[azuniga]

Hello @dparrish-better 

You may have run out of space because the root folder path is filling up. The reason for the larger hard drive on the log side is because some people parse a massive amount of firewalls and some of these firewalls ingest tons of data so at the very least 100gb would be a recommendation. Also not all customers want their data deleted after some want it compressed and saved on the machine.

[dparrish-better]

@azuniga Appreciate the response; however, that doesn't directly answer the question.  Per the Expedition Install Guide it says the OS disk only needs to be 6GB.  That will be undersized if this is where Device/Project folders reside, as Ubuntu 20.04LTS3 with updates is already almost 6GB.

Is there a way to change the directory where Project/Device data is stored?  It currently goes to "/home/userSpace" - which is on the OS Disk