Join us at Gartner SEC London and discover how LevelBlue can help you secure what’s next. Learn More
Access immediate incident response support, available 24/7
If you don't use a reporting device and you receive an alert showing "The hourly health check detects "shadow.log pending" and the disk space usage is at the Critical level!" then
1. Check that someone has not selected in the filter UI to export reporter logs as shown below. The export checkbox will tell the filter to send logs and they will not move without a real IP.
2. Just un-check the box and save the setting, the filter will start rotating the logs daily and stop sending alerts.
To contact LevelBlue about this article or to request support: