# Sentinelone RPM\_MOUNT is filling up space

**URL:** <https://discuss.elastic.co/t/sentinelone-rpm-mount-is-filling-up-space/362212>\
**Category:** Elastic Agent\
**Created:** [June 28, 2024, 12:30pm UTC](https://discuss.elastic.co/t/sentinelone-rpm-mount-is-filling-up-space/362212 "2024-06-28T12:30:30Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![dhiyaneshwaran\_r](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dhiyaneshwaran_r/32/135652_2.png) [@dhiyaneshwaran\_r](https://discuss.elastic.co/u/dhiyaneshwaran_r)\
**Post date:** [June 28, 2024, 12:30pm UTC](https://discuss.elastic.co/t/sentinelone-rpm-mount-is-filling-up-space/362212/1 "2024-06-28T12:30:30Z")

</div>

Team,  
We are using _Elasticsearch-8.12.2_ version, where we are seeing the directory /opt/sentinelone with the same elastic user which is filling space in

> /opt/sentinelone/rpm\_mount

_ **Please clarify the below points:** _

1. How this SentinelOne is installed in my machine by elastic user?
2. How to increase the storage size for the rpm\_mount from current space?
3. Why we are having this SentinelOne and what it's use?
4. Can we stop the SentinelOne service?
5. Why it is not installed in other elastic nodes.

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [June 28, 2024, 12:36pm UTC](https://discuss.elastic.co/t/sentinelone-rpm-mount-is-filling-up-space/362212/2 "2024-06-28T12:36:41Z")

</div>

Hello and welcome,

SentinelOne is not an Elastic tool, you need to check with the admin of your infrastructure to troubleshoot this.

None of your question has anything to do with any Elastic tool.