execute expandspooldisk
Use this command to expand the /var/spool and /var/log disks on the VM without losing existing data. The spool disk is primarily used for storing training data and detection history.
To expand the spool and log disks, first add a new virtual disk in the VM settings, then run this command in the FortiNDR Console. After the system reboots, the additional space is allocated proportionally to the spool and log disks.
Syntax
execute expandspooldisk