Cisco Cisco Web Security Appliance S670 Information Guide

Page of 2
What is the behavior of an WSA when the logging
partition runs out of space?
Document ID: 117941
Contributed by Jakob Dohrmann and Siddharth Rajpathak, Cisco TAC
Engineers.
Jul 15, 2014
Contents
Question
Environment
Symptoms
Solution
Question
What is the behavior of an WSA when the logging partition runs out of space?
Environment
Cisco Web SecurityAppliance (WSA), all versions of AsyncOS
Symptoms
You receive alerts like the ones below:
−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−
The Warning message is:
Processing of collected reporting data has been disabled due to lack of logging disk space. Disk usage is
above 97 percent.
Recording of reporting events will soon become limited and reporting data may be lost if disk space is not
freed up (by removing old logs, etc).
Once disk usage drops below 97 percent, full processing of reporting data will be restarted automatically.
−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−
The Critical message is:
The log partition is at 107% capacity
−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−