Skip to content

Commit

Permalink
add same partition warning
Browse files Browse the repository at this point in the history
  • Loading branch information
awick committed Jan 9, 2025
1 parent ba263dc commit 44e1c18
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions faq.html
Original file line number Diff line number Diff line change
Expand Up @@ -1284,6 +1284,11 @@ <h3 class="subsection"id="data-never-gets-deleted">
onclick="copyLink(this, 'faq')">
</span>
</h3>
<p>
<span class="fa fa-exclamation-triangle mr-1"></span>
Arkime does <strong>NOT</strong> support having pcapDir and the OpenSearch/Elasticsearch data directory on the same file system.
Arkime will <strong>NOT</strong> work in this configuration as the tools fight for space.
</p>
<p>
The SPI data in OpenSearch/Elasticsearch and the PCAP data are not deleted at the same time.
The PCAP data is deleted as the disk fills up on the capture machines. See <a href="#pcap-deletion">here</a> for more information.
Expand Down

0 comments on commit 44e1c18

Please sign in to comment.