IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  email notification regarding low disk usage

    Posted Sun January 15, 2023 08:16 AM
    Hi all ,

    I have just received this mail in my mail box :

    Alert! IBM Security QRadar SOAR platform may run out of disk space


    Disk usage is over 90% on hxxps://xyzl[.]abc[.]com/. Action must be taken to prevent serious system problems.

    Disk Mount Point: /

    Total Space: 60G

    Used Space: 55G

    Available Space: 4.8G

    Used Percentage: 92%


    Where is this notification configured and how it can be enabled / disabled.

    Thanks.




    ------------------------------
    mohamad islam hamadieh
    ------------------------------


  • 2.  RE: email notification regarding low disk usage

    Posted Mon January 16, 2023 05:20 AM
    Edited by BEN WILLIAMS Mon January 16, 2023 06:10 AM
    Hi Mohamad,

    In https://www.ibm.com/docs/en/sqsp/47?topic=restore-backup-by-using-pgbackrest it mentions /etc/cron.d/ibm-security-soar. The contents of that file look like this.

    MAILTO=''
    1 0 * * 0 root /usr/bin/resBackupDatabase full
    1 0 * * 1-6 root /usr/bin/resBackupDatabase incremental
    0 9,21 * * * root /usr/bin/resCheckPgbackrestStatus
    0 9,21 * * * root /usr/bin/resCheckDatabaseDiskUsage

    /usr/bin/resCheckDatabaseDiskUsage instigates the check on the operating system. Users who have access to System Settings (System settings) are those who receive the notification.

    ------------------------------
    BEN WILLIAMS
    ------------------------------



  • 3.  RE: email notification regarding low disk usage

    Posted Mon January 16, 2023 07:10 AM
    Dear Ben ,

    I apretiate you taking the time to reply to my post.

    please let me know if you find anything regarding the recipient part.

    ------------------------------
    mohamad islam hamadieh
    ------------------------------



  • 4.  RE: email notification regarding low disk usage

    Posted Mon January 16, 2023 07:15 AM
    Hi Mohamad,

    I edited my response. Maybe you saw my first response before it was changed?

    /usr/bin/resCheckDatabaseDiskUsage instigates the check on the operating system. Users who have access to System Settings (System settings) are those who receive the notification.

    ------------------------------
    BEN WILLIAMS
    ------------------------------