large configuration snapshots

[stefanmadsen]

we have 2 nagios xi installations (prod + dev/test)
the dev/test installation triggered an out of disk alert at our NOC - and it is due to the nom/checkpoints/nagioscore - snapshots, some of which are 200mb+ in size:

Code: Select all

-rw-r--r-- 1 nagios nagios     30198 Aug  9 13:47 1470743237.tar.gz
-rw-r--r-- 1 nagios nagios       994 Aug  9 13:47 1470743237.txt
-rw-r--r-- 1 nagios nagios     30219 Aug  9 15:17 1470748654.tar.gz
-rw-r--r-- 1 nagios nagios       994 Aug  9 15:17 1470748654.txt
-rw-r--r-- 1 nagios nagios [b]226304877 [/b]Aug  9 15:42 1470750114.tar.gz
-rw-r--r-- 1 nagios nagios       994 Aug  9 15:41 1470750114.txt
-rw-r--r-- 1 nagios nagios [b]226304774 [/b]Aug  9 15:47 1470750425.tar.gz
-rw-r--r-- 1 nagios nagios       994 Aug  9 15:47 1470750425.txt
-rw-r--r-- 1 nagios nagios [b]226304808 [/b]Aug  9 15:49 1470750576.tar.gz
-rw-r--r-- 1 nagios nagios       994 Aug  9 15:49 1470750576.txt
-rw-r--r-- 1 nagios nagios [b]226304775 [/b]Aug  9 15:52 1470750745.tar.gz
-rw-r--r-- 1 nagios nagios       994 Aug  9 15:52 1470750745.txt
-rw-r--r-- 1 nagios nagios [b]226304705 [/b]Aug  9 15:52 1470750769.tar.gz
-rw-r--r-- 1 nagios nagios       994 Aug  9 15:52 1470750769.txt
-rw-r--r-- 1 nagios nagios [b]226308281 [/b]Aug  9 15:53 1470750791.tar.gz
-rw-r--r-- 1 nagios nagios      1717 Aug  9 15:53 1470750791.txt
-rw-r--r-- 1 nagios nagios [b]226308278[/b] Aug 10 08:46 1470811609.tar.gz
-rw-r--r-- 1 nagios nagios      1717 Aug 10 08:46 1470811609.txt
-rw-r--r-- 1 nagios nagios [b]226308275 [/b]Aug 10 09:00 1470812419.tar.gz
-rw-r--r-- 1 nagios nagios      1717 Aug 10 09:00 1470812419.txt

notice the date/time of the files, at somepoint yesterday during a configuration change - some large file issue was triggered.

for comparison, currently - the configuration of our dev/test and prod is exactly the same - heres the ll of the same folder of our prod server:

Code: Select all

-rw-r--r-- 1 nagios nagios 35603 Aug  5 10:16 1470384980.tar.gz
-rw-r--r-- 1 nagios nagios  1073 Aug  5 10:16 1470384980.txt
-rw-r--r-- 1 nagios nagios 35973 Aug  5 10:37 1470386226.tar.gz
-rw-r--r-- 1 nagios nagios  1074 Aug  5 10:37 1470386226.txt
-rw-r--r-- 1 nagios nagios 35973 Aug  5 10:53 1470387181.tar.gz
-rw-r--r-- 1 nagios nagios  1074 Aug  5 10:53 1470387181.txt
-rw-r--r-- 1 nagios nagios 35861 Aug  5 11:41 1470390103.tar.gz
-rw-r--r-- 1 nagios nagios  1074 Aug  5 11:41 1470390103.txt
-rw-r--r-- 1 nagios nagios 35984 Aug  5 11:46 1470390404.tar.gz
-rw-r--r-- 1 nagios nagios  1796 Aug  5 11:46 1470390404.txt
-rw-r--r-- 1 nagios nagios 36015 Aug  5 11:49 1470390599.tar.gz
-rw-r--r-- 1 nagios nagios  1796 Aug  5 11:49 1470390599.txt
-rw-r--r-- 1 nagios nagios 36015 Aug  6 10:54 1470473641.tar.gz
-rw-r--r-- 1 nagios nagios  1796 Aug  6 10:54 1470473641.txt
-rw-r--r-- 1 nagios nagios 36015 Aug  7 10:55 1470560102.tar.gz
-rw-r--r-- 1 nagios nagios  1796 Aug  7 10:55 1470560102.txt
-rw-r--r-- 1 nagios nagios 36015 Aug  8 10:56 1470646562.tar.gz
-rw-r--r-- 1 nagios nagios  1796 Aug  8 10:56 1470646562.txt
-rw-r--r-- 1 nagios nagios 36015 Aug  9 10:57 1470733021.tar.gz
-rw-r--r-- 1 nagios nagios  1796 Aug  9 10:57 1470733021.txt

could it be the snapshots are not being compressed? - please advice.

[tgriep]

The tar file is probably still compressed. The likely thing is that a large file was put in the path that the backup is ran against and that is why it is larger.
To truly find out, the tar file would have to be opened / extracted so we can view the contents.
Can you run the following commands and post the output so we van view it?

Code: Select all

tar tvfz 1470748654.tar.gz
tar tvfz 1470750114.tar.gz

This will just view the contents of the file and after seeing the differences between them, we can continue on from there.

[stefanmadsen]

just closing this one - we did indeed have a large file in there somewhere.

it was "hidden" in the import directory, and thus it was stored within configuration-saves, and even then via rollbacks.
definitely a user error

[lmiltchev]

All right, I am closing this topic.