EEI - The disk usage or memory limit reached - 30% Space free on Drive

[amitgal 0]

Hey ESET Support, Hello from Israel,

We recently deployed EEI in our organization (about 1000 Server+Workstations), We ran out of disk space a couple of times during the onboarding procedure and had the EEI server stop working but lately I added resources and extended the VM storage to 1.5tb so now mem is about 60% Usage and drive has 30% Available space.

Initially when i had storage problems i would add space and the EEI will start working again, But for the last week i have been receiving the message below, EEI seems to be working when connecting to the admin panel but on the Protect Admin Panel all devices state "Can't Connect to ESET Inspect Servers" i have recently updated to the latest version of the EDR - 1.7 i think.

These are the latest messages from the EEI logs

2022-04-24 10:44:50 012c8 Info: Database cleanup couldn't be started - another cleanup is already running
 

BTW when i try to run manual purge it also doesnt work, the log shows another purge, even after restart.

2022-04-24 10:56:40 011cc Error: HTTP error 503. Request PUT '/EVENTS/V2/***' from ::***

 

I have seen previous posts about the same problem in your forum but the only solution i found is freeing up disk space which is not the case right now as i have 30% free space on the drive.

[Marcos 4,919]

How do you have Data collection set up?

Do you use default retention settings, ie. 1 month for low-level data and 1 year for detections?

Did you enable learning mode at all to create exclusions from 100% clean machines?

Are ESET Inspect and ESET PROTECT installed on separate machines?
What is the hw configuration of the server that ESET Inspect is running on? Is the database on the same server? Do you use MS SQL?

[amitgal 0]

Yes, Data retention is on the default settings, I have enabled learning mode a few times, Answered maby 30% of the questions that popped up in the admin panel, and added some exclusions, I Doubt this is enough as I still have a lot of  questions and exclusions to run but im not even sure that my systems are working as I have been updating questions and exclusions for the past week and still nothing changes, I still receive the  "The disk usage or memory limit reached. Can't accept more data" In the logs.

 

[Marcos 4,919]

Please open a support ticket and I'm sure that we will be able to pinpoint the bottleneck and suggest optimizations or improvements.

[JamesR 50]

Could you clarify if you are using MS SQL or MySQL?

 

Also, is your SQL DB using a second drive?  It could be the SQL server is using a temp folder on the primary drive where the OS is installed.  The nightly purges will create a lot of temporary files, so its important to ensure that the your SQL server is using a Temp directory, on a drive with enough space.