Video Screencast Help

SEPM - Folder clu-prod is taking all my disk space

Created: 27 Mar 2012 • Updated: 06 Apr 2012 | 21 comments
This issue has been solved. See solution.

Hi Guys

I have SEPM on one of my servers, and the server is now running out of disk space.

I then looked at what was eating all my gigs! - And i found out that it was the folder clu-prod located at: C:\Program Files\Symantec\LiveUpdate Administrator\clu-prod

It's now at 14,5GB and counting.

Is there anyway to cleanup this folder to gain more diskspace? and is there anyway to make this not growing so fast?

In the last week i think it has been growing with 10GB at least. :(

 

Best regards

Gicls
 

Comments 21 CommentsJump to latest comment

Mithun Sanghavi's picture

Hello,

What version of Liveupdate Administrator are you using?

Please check this Article:

Managing LiveUpdate Administrator 2.x Space Usage

https://www-secure.symantec.com/connect/articles/managing-liveupdate-administrator-2x-space-usage

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Gicls's picture

Hi

Thanks for the reply.

 

I'm running Version: 2.2.1.16

I have looked at the article, but i cannot see anywhere how to gain more disk space.

Sorry for the lack of my expertice in this.

Mithun Sanghavi's picture

Hi Gicls,

Check this Articles - 

TECH138380   Is it Possible to Configure LiveUpdate Administrator 2.x Download Directory Locations?

TECH95156   Moving LiveUpdate Administrator content to different folders or disk volumes

Again, since you are still running LUA 2.2, then I strongly encourage you to upgrade.  LUA 2.3.1 is now available!

LiveUpdate Administrator 2.3.x: Release Notes
Article: TECH155523 | Created: 2011-03-14 | Updated: 2011-12-12 |
Article URL http://www.symantec.com/docs/TECH155523

Also see:

LiveUpdate Administrator 2.3.1: What's New
https://www-secure.symantec.com/connect/articles/liveupdate-administrator-231-whats-new

I just keep 2 revisions, myself, and have the LUA configured to purge older files that are unnecessary on a daily basis.  Also: make sur ethat LUA is configures to download ONLY what you need, and not aldo contenst for optional components that are not used in your environment.  See "LiveUpdate Administrator: Product Selection Guide" for a SEP 12.1 example.  https://www-secure.symantec.com/connect/articles/liveupdate-administrator-product-selection-guide

You may wish to cast a vote in favor of the following enhancement request:

"Purge Now" Button for LiveUpdate Administrator 2.x
https://www-secure.symantec.com/connect/ideas/purge-now-button-liveupdate-administrator-2x

 

I would recommend you to create a case with Symantec Technical Support to grab the Latest copy of LUA 2.3.1

You can create a Case Online as well...

How to update a support case and upload diagnostic files with MySupport

http://www.symantec.com/docs/TECH71023

Create and Manage Support Cases

http://www.symantec.com/business/support/index?page=content&id=HOWTO31091

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Simpson Homer's picture

Solution

The size necessary will depend on what products are configured in LUA 2.x for download and distribution, and whether full products or only the necessary components are selected. Estimates below are based on current SEP definitions available in May 2010. The necessary sizes will increase over time as protection is added against additional threats.

We will use a typical Symantec Endpoint Protection (SEP) 11.x configuration in the calculation.

Additional information and illustrations on how LUA 2.x downloads, stores, and purges contents can be found in the Connect Forum article, Managing LiveUpdate Administrator 2.x Space Usage.

 

LUA 2.x has a Temporary Download Folder, a Downloaded Definitions Storage Folder ("Manage Updates"), a Definitions Test Distribution Folder (optional) and a Definitions Production Distribution Folder.

1. Temporary Download Folder
Default location: \TempDownload 
Updates are copied to the TempDownload folder prior to their distribution, and are then deleted. The temporary download folder should have no permanent content, apart from 1-5 KB.
This folder size grows for downloads, but is cleared each time again. Allow 2 GB (maximum possible daily download) for this folder in your total disk space calculation.

2. Downloaded Definitions Storage Folder (Manage Updates Folder)
Default location: <App_data_path>\All Users\Symantec\LiveUpdate Administrator\Downloads 
This folder has average 4 GB, is purged weekly based on revisions to keep, configurable in the LUA console.

3. Definitions Test Distribution Folder (Distribution Center)
Default locationC:\Program Files\Symantec\LiveUpdate Administrator\clu-test
Same size as in 4. Definitions Production Distribution folder. If you use the folder, double the space needed in 4.

4. Definitions Production Distribution Folder (Distribution Center)
Default location: C:\Program Files\Symantec\LiveUpdate Administrator\clu-prod

Full SEP content (typical initial download) >> 2.4 GB 

Final Calculation
Temporary Download folder >> 2 GB
Downloaded Definitions folder >> 4 GB
Definitions Test Distribution >> 3 GB (optional)
Definitions Production Distribution >> 3 GB

Total >> 12GB (optional)
Total >> 9GB (minimum)
 

pete_4u2002's picture

upgrade LUA to the latest version 2.3.1

and also check this link

How to change the clu-prod, clu-test, Luadownload and TempDownload folders within LiveUpdate Administrator 2.2

http://www.symantec.com/business/support/index?page=content&id=TECH134763

MichaelD50's picture

I think everyone is trying to be helpful but one question remains unanswered:

Why did you install LUA?

If your SEPM has access to the internet and is getting latest definitions, PC SEP clients will get their content updates from the SEPM.

If an internal LUA is required in your environment, first of all it shouldn't be running on the same computer as your SEPM. LUA is a resource hog. Very few "normal" SEP installs require the use of LUA.

My best guess is that you installed something you don't need and you should just remove it!

MJD

khaskins82's picture

I often wonder why a Live Update server is used in what appears to be a simple SEPM deployment. I never considered setting up a Live Update server, even though we have several Symantec products used in our environment.

SMLatCST's picture

As MichaelD50 above says, it's normally not required to have an LUA installed anywhere if all you're updating is SEP (it may be beneficial if you use several Symantec products installed on many boxes).

It also goes against Symantec recommendations to have both LUA and the SEPM on the same box.

I have the sneaking suspicion that many administrators moving from SAV to SEP don't know LUA is no longer required to distribute content, and so just install it as a matter of course...

Gicls's picture

Okay - So your suggestion is to uninstall the LUA on our server?

We have the antivirus client installed on approx 50 computers - So they will get the lates updates trough that or am i missing something? :)

Mithun Sanghavi's picture

Hello,

I agree. In your case, you would not need Liveupdate Administrator as you have only 50 SEP clients which needs to be updated and the same could be done via SEPM.

LiveUpdate Administrator 2.x can be of great assistance in environments which host a mixture of Symantec products (SEP, SAV, SMSMSE, and Scan Engine, for example). 

In environments where SEP is the only Symantec product that must be updated, a LUA 2.x server is usually not necessary.  The SEPM and GUPs can efficiently download and distribute all necessary updates without the need of LUA 2.x.  For more information please see Top 10 Symantec Best Practices - Deploying Symantec Endpoint Protection Architecture.

Also check this - When is it Recommended to Use LiveUpdate Administrator 2.x with Symantec Endpoint Protection?

http://www.symantec.com/docs/TECH154896

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Mick2009's picture

Hi Gicls,

Here are two helpful articles.  LiveUpdate Administrator 2.x can be a great tool and is incredibly useful in certain environments.  However, it is usually not necessary in all-SEP environments where there is Interent access.  Also: LUA should never be installed on a SEPM.

LiveUpdate Administrator 2.x and Symantec Endpoint Protection Manager on the Same Physical Server
Article: TECH105076   |  Created: 2008-01-05   |  Updated: 2011-07-11   | 
Article URL http://www.symantec.com/docs/TECH105076 
 

When is it Recommended to Use LiveUpdate Administrator 2.x with Symantec Endpoint Protection?
Article: TECH154896   |  Created: 2011-03-07   |  Updated: 2011-11-11   | 
Article URL http://www.symantec.com/docs/TECH154896 
 

Hope this helps!

Thanks and best regards,

Mick

With thanks and best regards,

Mick

MichaelD50's picture

In your reply, you wrote:

"I agree. In your case, you would need Liveupdate Administrator as you have only 50 SEP clients which needs to be updated and the same could be done via SEPM."

I think you meant to say "...you would not need Liveupdate Administrator as you have only 50 SEP clients..."

Please proofread your replies more carefully!

MJD

Mithun Sanghavi's picture

Hello,

I appreciate it. :)

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Gicls's picture

Thank you all for your answers.

So i do not need LUA installed on my PC?
The clients on the computers will get the updates by them self?

Is the folder clu-prod a part of LUA? and will be deleted when i uninstall the LUA?

 

Thanks in advance

Mick2009's picture

Hi again,

> So i do not need LUA installed on my PC?

LUA 2.x is an optional tool which can help keep client up to date in certain circumstances.  Usually, the SEPM can download and distribute everything that is needed.  Unless you have specific need of LUA, you can save space and bandwidth by uninstalling it.

> The clients on the computers will get the updates by them self?

Yes, if configured to receive their updates from the SEPM in their LiveUpdate policy.  Here is a good link, and there is a lot mor great infromation in teh admin guide:

Symantec Endpoint Protection Manager - LiveUpdate - Policies explained
Article: TECH104435   |  Created: 2008-01-20   |  Updated: 2010-11-30   | 
Article URL http://www.symantec.com/docs/TECH104435 
 

> Is the folder clu-prod a part of LUA? and will be deleted when i uninstall the LUA?

Yes and yes.  clu-prod is the name of the default Distribution Center in LUA 2.x.

Please do keep this thread up to date with your decisions and findings for the benefit of future admins in teh same situation.  &: )

 

With thanks and best regards,

Mick

Gicls's picture

Okay

 

I have a policy for update i think :0)

Is this looking correct for the clients to update trough SEPM witch is located on my server

 

http://peecee.dk/upload/view/359057

Mick2009's picture

I would uncheck "Use a LiveUpdate server" - let the clients get their updates just from the SEPM. That usually works best.

What happens when both LiveUpdate Server and Default Management server are configured in a LiveUpdate policy?
Article: TECH140817   |  Created: 2010-09-28   |  Updated: 2012-03-27   | 
Article URL http://www.symantec.com/docs/TECH140817 
 

Be sure to monitor, after the policy is applied, that no clients are becoming out-of-date.  There are reports that can be run from the SEPM on the definition date of clients.  If ever client is up-to-date, then your infrastructure is working.  &: )

With thanks and best regards,

Mick

SOLUTION
Gicls's picture

Thanks..

So the steps will be:

 

1: Uncheck  "Use a LiveUpdate server"
2: Uninstall LUA
3: Check if my clients is not out of date

Correct?

Mick2009's picture

Sounds good- be sure to apply/assign that LU policy to the clients in your organization, of course. 

The monitoring is a job for the coming days, just to make sure those clients are staying updated.

One additional suggestion: how many content revisions in that SEPM configured to keep?   I recommend 20-30 if the SEPM has the hard drive space.  The more past revisions stored, the smaller the update files (and traffic) will be over the network.

Best Practices for configuring the number of content revisions to keep in Symantec Endpoint Protection Manager
Article: TECH92225   |  Created: 2009-01-05   |  Updated: 2011-12-02   | 
Article URL http://www.symantec.com/docs/TECH92225
 

With thanks and best regards,

Mick

Ted G.'s picture

For someone who's trying to conserve disk space, 20-30 revisions is out of the question, considering at ~250MB per revision that would take ~5-7.5GB. I'd say more like keep 6-10 revisions, enough for 2-3 days would be sufficient for the amount of clients the customer has.

Mick2009's picture

Many thanks for the input, Ted G! 

If there are a small number of SEP clients and they are always in the office / download defs every day, you will only need a handful of past content revisions.  If there are a lot and some of them go offline for a week at a time, then I recommend many past content revisions - otherwise those clients will be requesting large, full definition sets.

With thanks and best regards,

Mick