Endpoint Protection

 View Only
  • 1.  SEPM LU on D drive, It eats up disk space....

    Posted Mar 25, 2010 12:37 AM

    Hi,

    Am using SEPM 11.0.5.  The LU of SEPM has eaten up all the disk space in D drive. 20 GB.  I suppose there is a file curruption in the SEPM LU database. 

    How can i clear the database manually to enable fresh LU updates.

    Leonard


  • 2.  RE: SEPM LU on D drive, It eats up disk space....



  • 3.  RE: SEPM LU on D drive, It eats up disk space....

    Posted Mar 25, 2010 02:39 AM
    Hi Leonard,

    Can you be specific as to what directory is 20 GB?  If it is the location where the contents are made available for all the SEPM's clients to come collect LU updates, then 20 GB is probably normal.  With the huge number of threats in circulation, each day's full definition set is above 70 MB.  If the SEPM is retaining (for instance) the past week's worth of definitions (multiple full definition sets per day, plus all the deltas for each, plus client software and NTP defs and PTP defs and etc etc etc...) 20 GB is a realistic figure.

    It is possible to tune the number of past revisions that the SEPM keeps.  Let the forum know if this is the nature of your query and links to specific articles will no doubt be recommended.

    Thanks and best regrdas,

    Mick


  • 4.  RE: SEPM LU on D drive, It eats up disk space....

    Posted Mar 25, 2010 02:40 AM
    Hi,

    Please make sure that you stop the SEPM service before you perform the steps provided in the article mentioned above.

    Aniket


  • 5.  RE: SEPM LU on D drive, It eats up disk space....

    Posted Mar 25, 2010 03:00 AM


    I followed it but, still in fix. 

    The hard disk space reduces slowly and reach 0 in a period of say 20 min max



  • 6.  RE: SEPM LU on D drive, It eats up disk space....

    Posted Mar 25, 2010 03:00 AM


    I followed it but, still in fix. 

    The hard disk space reduces slowly and reach 0 in a period of say 20 min max



  • 7.  RE: SEPM LU on D drive, It eats up disk space....

    Posted Mar 25, 2010 03:07 AM

    Yes it was done and the service was restarted after completion of the process.

    The server was also restarted.

    Leonard



  • 8.  RE: SEPM LU on D drive, It eats up disk space....

    Posted Mar 25, 2010 03:16 AM
    Which is the exact folder and path you are seeing large size?


  • 9.  RE: SEPM LU on D drive, It eats up disk space....

    Posted Mar 25, 2010 03:27 AM
    Can you check the number of content revisions to keep in SEPM?

    You can check that in admin->server->Site Properties-> Liveupdate

    Over there, you need to make sure that its not a very high number.

    Aniket


  • 10.  RE: SEPM LU on D drive, It eats up disk space....

    Posted Mar 25, 2010 04:32 AM
    For reducing the size of database

    1) Reduce the amount of logs stored in the database
    Logs are one source of the databases large size. They can be configure on the following screen.
    Admin --> Servers --> (Local Site) --> Edit Site Properties --> Log Settings
    Here you can set the max number of log entries and max number of days. A log expires when either of the conditions are hit.
    So if you set Control Log Limit to 5,000 entries / 30 days. Then the logs will expire if there are more than 5000, or if they are 30+ days old.
     
    2) Increase the DB maintenance
    You can set the DB maintenance to run more often under:
    Admin --> Servers --> (Local Site) --> Edit Site Properties --> Database
     
    3) Remove old client packages
    You can remove old client packages from the database. Be aware, although this saves room in the DB, it can incur additional bandwidth. Here's how it works. When you use the "Auto-Upgrade" feature, (located under Clients --> Install Packages, or by using "Upgrade Groups with Package under Admin --> Install Packages), if the server has both the clients old packages, plus the clients new package, it can create a delta file that is much smaller than the original package. It then sends this delta file to all the clients instead of the original package. But if you delete the old client packages from the database, this delta can not be created and the whole package is sent down, which means lots of network traffic, depending on how many clients you are upgrading.
    If you don't have any old clients (like MR3 or MR4), then it's safe to delete these old packages. If you are still planning to upgrade old clients, you may want to keep them around for a while.
     
    You can remove the old packages under Admin --> Install Packages --> Client Install Packages.
    Note: You can not remove the latest packages, only older packages.
     
    4) Reduce Content and Removing unzipped packages
    You can reduce the number of content revisions the sever keeps. This reduces the database size, but can also effect your servers ability to make content deltas (similar to the client package deltas mentioned earlier, but content deltas are generally more important because they are used multiple times a day). You can find this setting under Admin --> Servers --> (Local Site) --> Edit Site Properties -> LiveUpdate --> Disk Space Management for Downloads
    I would strong advise against setting this number any lower than 3. But if this number is set to 10 or higher, you could lower it to reduce the database size.
    What this number indicates in the number of AV definitions, IPS definitions, etc . that are stored in the database. The greater this number is, the higher the chances are that the server will be able to create content deltas, especially if a client has been offline. Normal 3 to 4 AV Content revisions are released per day, so you want this setting to at least 3.
     I would recommend a number more like 10 or higher so that any computers that disconnected on Friday night can still get a delta file on Monday morning.
     
    The "Store client packages unzipped to provide better network performance for upgrades" option.
    This option is right next to the content number. Disabling this option will reduce the diskspace SEPM uses -- but it also disabled all deltas! So it is my strong recommendation you do NOT disable this option. The only reason I mention it here is because I'm sure someone will see the option while setting the content revisions to keep and will want to test this check box out. Don't try it. Deltas are good things, leave this option enabled.