Low disk space on the Log Server machine

Log Server stores Internet activity records in temporary log cache files or BCP (bulk copy program) files on the Log Server machine until they can be processed into the Log Database.

Log Server also moves the cache files into a separate folder from which the Cloud App Service processes them into the Log Database.

Web protection software watches the space available for both log cache files and BCP files. By default:

  • Log cache files are stored in the C:\Program Files\Websense\Web Security\bin\Cache directory.
  • BCP files are stored in the C:\Program Files\Websense\Web Security\bin\Cache\BCP directory.
  • Log cache files are moved to the C:\Program Files\Websense\Web Security\bin\Cache\cloudapp directory

The log cache file and BCP file location can be changed on the Web > Settings > Reporting > Log Server page in the Forcepoint Security Manager. See Configuring Log Server.

Note: If you have multiple Log Servers that forward their data to a primary Log Server, disk space is tracked for the primary Log Server only.

A health alert message is displayed on the System tab of the Status > Dashboard page if the space available at any of these locations drops too low. If there is insufficient disk space, logging stops.

  • A warning message appears when the free disk space falls below 10% on the drive where log files are stored. Although logging continues, you should clear disk space on the machine as soon as possible to avoid loss of log data.
  • An error message appears when there is less that 4 MB of free disk space on the drive where log files are stored.

    When disk space dips below 4 MB, logging may become intermittent or stop completely. To minimize loss of log data, clear disk space on the Log Server machine as soon as possible after the error message appears.