Sentinelone RPM_MOUNT is filling up space

Elastic Stack Elastic Agent
1

Team,
We are using Elasticsearch-8.12.2 version, where we are seeing the directory /opt/sentinelone with the same elastic user which is filling space in

/opt/sentinelone/rpm_mount

Please clarify the below points:

  1. How this SentinelOne is installed in my machine by elastic user?
  2. How to increase the storage size for the rpm_mount from current space?
  3. Why we are having this SentinelOne and what it's use?
  4. Can we stop the SentinelOne service?
  5. Why it is not installed in other elastic nodes.
2

Hello and welcome,

SentinelOne is not an Elastic tool, you need to check with the admin of your infrastructure to troubleshoot this.

None of your question has anything to do with any Elastic tool.