SentinelOne Names LevelBlue Global Delivery Partner for Wayfinder Services. Learn More
Access immediate incident response support, available 24/7
If you don't use a reporting device and you receive an alert showing "The hourly health check detects "shadow.log pending" and the disk space usage is at the Critical level!" then
1. Check that someone has not selected in the filter UI to export reporter logs as shown below. The export checkbox will tell the filter to send logs and they will not move without a real IP.
2. Just un-check the box and save the setting, the filter will start rotating the logs daily and stop sending alerts.
To contact LevelBlue about this article or to request support: