When the root partition on the Deep Security Virtual Appliance (DSVA) is full, issues can occur when activating new virtual machines created on the ESXi host. To resolve the issue, do the following:

A. If running DSVA 8.0 SP1 Patch 1 (build 1770) or earlier, apply DSVA hotfix build 1783.

1. Delete old /var/log/syslog.# and /var/log/messages.#
2. Contact Trend Micro Technical Support to request a copy of DSVA hotfix build 1783.

B. Configure an Insufficient Disk Space alert.

This configuration will trigger an email notification before the DSVA completely loses disk space. However, it can only delete DPI, firewall, and agent/appliance event logs. The system logs in ../var/log/messages and ../var/log/syslog need to be removed manually.

To configure the alert:

1. On the dashboard of the DSM console, click Alerts > Configure Alerts.
2. Look for the Insufficient Disk Space alert and turn it on.
3. Select the following checkboxes:
   • Send Email to notify when this alert is raised
   • Send Email to notify when condition for this alert changes (such as # of items)
4. Set the administrator to receive the alert.
   1. Go to System > Users.
   2. Select the user and then click Properties.
   3. Go to the Contact Information tab.
   4. Select the Receive Alerts checkbox.