Jump to content
sgatke

Patch Management disk usage [In progress]

Recommended Posts

Hi

 

We are running versions:

KSC 10.4.343

Network Agent 10.4.343

KES 10.3.0.6294

 

When using patch management we are experiencing extreme disk usage.

C:\ProgramData\KasperskyLab\adminkit\1093 is using 180GB disk space.

D:\KasperskyLab\wsusfiles is using 190+GB disk space.

 

Both are quite a bit above the minimum 100GB recommended disk space.

 

Use administration server as WSUS server = Enabled.

Windows Update search mode = Active.

 

There are no old 'install patches & upgrades' tasks in KSC.

 

When starting a new patch install task, e.g. for 34 Security Updates for Microsoft Excel 2010 disk space usage on the KSC server is growing with at least 10GB on both drives. There are no Service Packs among the Security Updates so I find it a bit excessive that disk usage is growing so much.

 

My questions is, how can I clear up old data from C:\ProgramData\KasperskyLab\adminkit\1093 and D:\KasperskyLab\wsusfiles ?

Oldest entry in C:\ProgramData\KasperskyLab\adminkit\1093\.working\FTServer is from November 10th 2016.

Should these old files not be cleaned up somehow, when they are not needed from existing tasks?

 

Thank you in advance.

 

 

Share this post


Link to post
Hi

 

We are running versions:

KSC 10.4.343

Network Agent 10.4.343

KES 10.3.0.6294

 

When using patch management we are experiencing extreme disk usage.

C:\ProgramData\KasperskyLab\adminkit\1093 is using 180GB disk space.

D:\KasperskyLab\wsusfiles is using 190+GB disk space.

 

Both are quite a bit above the minimum 100GB recommended disk space.

 

Use administration server as WSUS server = Enabled.

Windows Update search mode = Active.

 

There are no old 'install patches & upgrades' tasks in KSC.

 

When starting a new patch install task, e.g. for 34 Security Updates for Microsoft Excel 2010 disk space usage on the KSC server is growing with at least 10GB on both drives. There are no Service Packs among the Security Updates so I find it a bit excessive that disk usage is growing so much.

 

My questions is, how can I clear up old data from C:\ProgramData\KasperskyLab\adminkit\1093 and D:\KasperskyLab\wsusfiles ?

Oldest entry in C:\ProgramData\KasperskyLab\adminkit\1093\.working\FTServer is from November 10th 2016.

Should these old files not be cleaned up somehow, when they are not needed from existing tasks?

 

Thank you in advance.

 

Hello.

 

What is the size of the KAV database, and the created backups?

 

Thank you.

Share this post


Link to post
Hello.

 

What is the size of the KAV database, and the created backups?

 

Thank you.

 

Last KLBACKUP size (from yesterday) is 5,52 GB.

 

Can you please tell me where I can check the size of the KAV database?

Share this post


Link to post
Last KLBACKUP size (from yesterday) is 5,52 GB.

 

Can you please tell me where I can check the size of the KAV database?

 

Hello,

 

you can find the value in properties of KSC server.

Thank you.

 

Share this post


Link to post
Last KLBACKUP size (from yesterday) is 5,52 GB.

 

Can you please tell me where I can check the size of the KAV database?

 

By the way, disk space is rapidly filling up.

This morning I expanded both drives by 20GB each. Within two hours both drives were full again.

 

C:\....\adminkit\1093 is now 212,5 GB

D:\...\wsusfiles is now 218,2 GB

 

Please let me know how I can stop the drives from filling up and how to clean up the folders. We have a limit on how much I am able to expand the drives.

 

Unfortunately, I am now unable to log into KSC because of the low disk space.

I have the option to expand a little more, but I am hesitant to do it until I know how to stop the drives from filling up.

Edited by SGatke

Share this post


Link to post
By the way, disk space is rapidly filling up.

This morning I expanded both drives by 20GB each. Within two hours both drives were full again.

 

C:\....\adminkit\1093 is now 212,5 GB

D:\...\wsusfiles is now 218,2 GB

 

Please let me know how I can stop the drives from filling up and how to clean up the folders. We have a limit on how much I am able to expand the drives.

 

Unfortunately, I am now unable to log into KSC because of the low disk space.

I have the option to expand a little more, but I am hesitant to do it until I know how to stop the drives from filling up.

 

You can stop using KSC server as WSUS as a temporary solution.

Please attach a screen shot where are displayed settings which define items to be downloaded to WSUS server.

Thank you.

 

Share this post


Link to post
You can stop using KSC server as WSUS as a temporary solution.

Please attach a screen shot where are displayed settings which define items to be downloaded to WSUS server.

Thank you.

 

Database size: 3525,0 MB (Size of data: 3248,6 MB, Number of Events: 4888)

 

I have only selected a few applications to be downloaded, mainly Office 2013 & Office 2016, Windows 10 and Windows Server 2016. (see screenshots wsus1-wsus4)

However, on the Updates Categories, all categories are selected. (see screenshot wsus5)

The way I understand this is that e.g. critical updates are only downloaded for the above applications but is that correct?

 

Languages selected are only Danish and English (US)

post-604283-1493757939.jpg

post-604283-1493757944.jpg

post-604283-1493757955.jpg

post-604283-1493757961.jpg

post-604283-1493757965.jpg

Edited by SGatke

Share this post


Link to post
Hi,

 

You can move files from D:\...\wsusfiles to any other place using klsrvswch.exe utility.

 

Thank you!

 

Thank you, but I did that initially to save space on the C: drive.

What I am looking for is a solution that will actually clean up the used disk space. 200GB used on both C: and D: is way too much disk space wasted.

Your own recommendations are 'at least 100GB' - in our case almost 400GB are consumed by this feature. That seems a bit excessive and I get the feeling that old patches (that have already been deployed) are still saved on the system. Eventually, this will end up costing Terabytes of disk space if there is no cleanup mechanism.

 

As per your recommendations, I have turned off 'Use KSC as WSUS server', but disk space is not being cleaned up by this.

Can I delete the contents of \wsusfiles from D:?

How about the \1093 folder on the C: drive, how can I clean that up?

Share this post


Link to post
Thank you, but I did that initially to save space on the C: drive.

What I am looking for is a solution that will actually clean up the used disk space. 200GB used on both C: and D: is way too much disk space wasted.

Your own recommendations are 'at least 100GB' - in our case almost 400GB are consumed by this feature. That seems a bit excessive and I get the feeling that old patches (that have already been deployed) are still saved on the system. Eventually, this will end up costing Terabytes of disk space if there is no cleanup mechanism.

 

As per your recommendations, I have turned off 'Use KSC as WSUS server', but disk space is not being cleaned up by this.

Can I delete the contents of \wsusfiles from D:?

How about the \1093 folder on the C: drive, how can I clean that up?

 

Hello!

 

Contents of the wsus folder can be deleted, but the contents of 1093 folder is better to keep.

 

Thanks!

Share this post


Link to post
Hello!

 

Contents of the wsus folder can be deleted, but the contents of 1093 folder is better to keep.

 

Thanks!

 

Thank you, but unfortunately that does not solve our problem of excessive disk usage on the C: drive.

Share this post


Link to post
Thank you, but unfortunately that does not solve our problem of excessive disk usage on the C: drive.

 

Do you mean, that the space is taken again?

 

Thanks!

Share this post


Link to post
Do you mean, that the space is taken again?

 

Thanks!

 

What I mean is that the C:\....\adminkit\1093 folder is still at 212,5 GB.

We would very much like to reclaim (some of) this space.

 

To my understanding, this folder is used to generate the install packages (of patches) to all clients. If this space is not eventually cleared, then we will not have space for additional packages installations.

In other words, if there is not an automatic cleanup process in KSC this folder will just continue to grow forever. I don't believe that is the case, but would like to know if it is possible to trigger this cleanup mechanism.

I have already deleted all old install tasks from KSC, but apparently that makes no difference in space usage.

Share this post


Link to post
What I mean is that the C:\....\adminkit\1093 folder is still at 212,5 GB.

We would very much like to reclaim (some of) this space.

 

To my understanding, this folder is used to generate the install packages (of patches) to all clients. If this space is not eventually cleared, then we will not have space for additional packages installations.

In other words, if there is not an automatic cleanup process in KSC this folder will just continue to grow forever. I don't believe that is the case, but would like to know if it is possible to trigger this cleanup mechanism.

I have already deleted all old install tasks from KSC, but apparently that makes no difference in space usage.

 

Please do the following:

 

Start the collecting of traces, restart the KSC Service and Network Agent service and wait about 2 sync periods.

 

Also send us the listing of these folders.

 

Thanks!

Share this post


Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.