The appliance monitors and frees disk space at regular intervals. It automatically deletes files/artifacts, emails, and virtual machine captures based on size and age limits. It deletes files beginning with the oldest so that all of the artifact types stay within their specified disk space limits. You can change the limits to optimize the cleanup.
The default limits are as follows:
Artifact type and measurement | Default limit |
20 GB | |
30 days | |
20 GB | |
15 days | |
Malicious Virtual Machine Captures Size | 20 GB |
Malicious Virtual Machine Captures Days | 30 days |
Non-Malicious Virtual Machine Captures Size | 20 GB |
Non-Malicious Virtual Machine Captures Days | 15 days |
Malicious Emails Size | 20 GB |
Malicious Emails Days | 30 days |
See the following sections for details on managing the artifact cleanup limits:
Changing limits for automatic artifact cleanup using the CLI
You can change the artifact cleanup limits to automatically delete disk space based on the volume of artifacts your appliance typically processes and the amount of disk space you have available. You can change these using CLI commands only and these CLI commands must be executed only on the Broker node.
To change artifact cleanup limits:
Go to CLI configuration mode:
hostname # enablehostname # configure terminalShow the current limits:
For NX version 11.x, run the following CLI command:
hostname (config) # show mvx analysis cleanup config
The following result is displayed:
Non-malicious : 2 Days Non-malicious : 100 GB Malicious : 30 Days Malicious : 200 GB
hostname (config) # show analysis artifacts-cleanup
Results for NX 11.x:
Malicious VM Captures: Keep Size (GB) : 20 Keep Days : 30 Malicious Emails: Keep Size (GB) : 20 Keep Days : 30 Non Malicious VM captures: Keep Size (GB) : 20 Keep Days : 15
Specify new limits for any settings you want to change:
To change the limit for malicious files/artifacts by day (applicable only for NX version 11.x and later):
hostname (config) # mvx analysis cleanup malicious data keep days 30
To change the limit for non-malicious files/artifacts by day (applicable only for NX version 11.x and later):
hostname (config) # mvx analysis cleanup non-malicious data keep days 15
To change the limit for malicious files/artifacts by size (applicable only for NX version 11.x and later):
hostname (config) # mvx analysis cleanup malicious data keep size 200
To change the limit for non-malicious files/artifacts by size (applicable only for NX version 11.x and later):
hostname (config) # mvx analysis cleanup non-malicious data keep size 100
To change the limit for non-malicious artifact files by day:
hostname (config) # analysis artifacts-cleanup non-malicious files keep days 10
To change the limit for malicious emails by day:
hostname (config) # analysis artifacts-cleanup malicious emails keep days 30
To change the limit for malicious virtual machine captures by day:
hostname (config) # analysis artifacts-cleanup malicious vm-captures keep days 30
To change the limit for non-malicious virtual machine captures by day:
hostname (config) # analysis artifacts-cleanup non-malicious vm-captures keep days 10
To change the limit for malicious artifact files by size:
hostname (config) # analysis artifacts-cleanup malicious files keep size 40
To change the limit for non-malicious artifact files by size:
hostname (config) # analysis artifacts-cleanup non-malicious files keep size 20
To change the limit for malicious emails by size:
hostname (config) # analysis artifacts-cleanup malicious emails keep size 40
To change the limit for malicious virtual machine captures by size:
hostname (config) # analysis artifacts-cleanup malicious vm-captures keep size 40
To change the limit for non-malicious virtual machine captures by size:
hostname (config) # analysis artifacts-cleanup malicious vm-captures keep size 20
Save your changes.
hostname (config) # write memory
Restoring limits to default values for automatic artifact cleanup using the CLI
You can restore all artifact cleanup limits to their defaults with a single CLI command.
To restore artifact cleanup limits to the defaults:
Go to CLI configuration mode:
hostname > enable hostname # configure terminal
To set artifact cleanup limits to the defaults:
hostname (config) # analysis artifacts-cleanup set-default
Save your changes.
hostname (config) # write memory