Manager is storing Elastic Data

[oneCrazyAdmin]

Version

2.4.30

Installation Method

Security Onion ISO image

Description

configuration

Installation Type

Distributed

Location

on-prem with Internet access

Hardware Specs

Exceeds minimum requirements

CPU

16

RAM

64

Storage for /

130G

Storage for /nsm

259G

Network Traffic Collection

tap

Network Traffic Speeds

1Gbps to 10Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

No, there are no failures

Logs

No, there are no additional clues

Detail

We are running a distributed environment with the default cross cluster elasticsearch.

I have started to see my manager using its disk space to host some of the shards. The console says that it is a manager, not a manager-search. Is there a way to verify this or do I just need to allocate more disk space to the manager?

I have 4 search nodes.

Guidelines

• I have read the above statement and can confirm my post is relevant to Security Onion 2.4.

[oneCrazyAdmin]

#11062