You can change the artifact cleanup limits to automatically delete disk space based on the volume of artifacts your appliance typically processes and the amount of disk space you have available. You can change these using CLI commands only and these CLI commands must be executed only on the Broker node.
To change artifact cleanup limits:
Go to CLI configuration mode:
hostname # enablehostname # configure terminalShow the current limits:
For EX version 11.x, run the following CLI command:
hostname (config) # show mvx analysis cleanup config
The following result is displayed:
Non-malicious : 2 Days Non-malicious : 100 GB Malicious : 30 Days Malicious : 200 GB
hostname (config) # show analysis artifacts-cleanup
Results for EX 11.x:
Malicious VM Captures: Keep Size (GB) : 20 Keep Days : 30 Malicious Emails: Keep Size (GB) : 20 Keep Days : 30 Non Malicious VM captures: Keep Size (GB) : 20 Keep Days : 15
Specify new limits for any settings you want to change:
To change the limit for malicious files/artifacts by day (applicable only for EX version 11.x and later):
hostname (config) # mvx analysis cleanup malicious data keep days 30
To change the limit for non-malicious files/artifacts by day (applicable only for EX version 11.x and later):
hostname (config) # mvx analysis cleanup non-malicious data keep days 15
To change the limit for malicious files/artifacts by size (applicable only for EX version 11.x and later):
hostname (config) # mvx analysis cleanup malicious data keep size 200
To change the limit for non-malicious files/artifacts by size (applicable only for EX version 11.x and later):
hostname (config) # mvx analysis cleanup non-malicious data keep size 100
To change the limit for non-malicious artifact files by day:
hostname (config) # analysis artifacts-cleanup non-malicious files keep days 10
To change the limit for malicious emails by day:
hostname (config) # analysis artifacts-cleanup malicious emails keep days 30
To change the limit for malicious virtual machine captures by day:
hostname (config) # analysis artifacts-cleanup malicious vm-captures keep days 30
To change the limit for non-malicious virtual machine captures by day:
hostname (config) # analysis artifacts-cleanup non-malicious vm-captures keep days 10
To change the limit for malicious artifact files by size:
hostname (config) # analysis artifacts-cleanup malicious files keep size 40
To change the limit for non-malicious artifact files by size:
hostname (config) # analysis artifacts-cleanup non-malicious files keep size 20
To change the limit for malicious emails by size:
hostname (config) # analysis artifacts-cleanup malicious emails keep size 40
To change the limit for malicious virtual machine captures by size:
hostname (config) # analysis artifacts-cleanup malicious vm-captures keep size 40
To change the limit for non-malicious virtual machine captures by size:
hostname (config) # analysis artifacts-cleanup malicious vm-captures keep size 20
Save your changes.
hostname (config) # write memory