<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic root filesystem disk space and /run/podman/logs/events.log in Firewall and Security Management</title>
    <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/root-filesystem-disk-space-and-run-podman-logs-events-log/m-p/277065#M105444</link>
    <description>&lt;P&gt;I noticed that one of my clients with on premise management with root filesystem almost full.&amp;nbsp; Starting digging into it only to find that this log file in /run/podman/logs/ was quite large.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Is there a reason that this is being written to the /run filesystem and not the /var/log filesystem where all the other logs reside?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Normally the /run filesystem is mounted as a tmpfs from ram, which is cleared every reboot.&amp;nbsp; Is there a reason that this is set to actually write to disk?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I've been finding a lot of these little overlooked log files on various checkpoint systems that do not seem to be maintained or cleaned up and fill the filesystem over time.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Is there a central SK that keeps track of all these log files?&lt;/P&gt;</description>
    <pubDate>Mon, 18 May 2026 18:17:17 GMT</pubDate>
    <dc:creator>Ted_Serreyn</dc:creator>
    <dc:date>2026-05-18T18:17:17Z</dc:date>
    <item>
      <title>root filesystem disk space and /run/podman/logs/events.log</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/root-filesystem-disk-space-and-run-podman-logs-events-log/m-p/277065#M105444</link>
      <description>&lt;P&gt;I noticed that one of my clients with on premise management with root filesystem almost full.&amp;nbsp; Starting digging into it only to find that this log file in /run/podman/logs/ was quite large.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Is there a reason that this is being written to the /run filesystem and not the /var/log filesystem where all the other logs reside?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Normally the /run filesystem is mounted as a tmpfs from ram, which is cleared every reboot.&amp;nbsp; Is there a reason that this is set to actually write to disk?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I've been finding a lot of these little overlooked log files on various checkpoint systems that do not seem to be maintained or cleaned up and fill the filesystem over time.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Is there a central SK that keeps track of all these log files?&lt;/P&gt;</description>
      <pubDate>Mon, 18 May 2026 18:17:17 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/root-filesystem-disk-space-and-run-podman-logs-events-log/m-p/277065#M105444</guid>
      <dc:creator>Ted_Serreyn</dc:creator>
      <dc:date>2026-05-18T18:17:17Z</dc:date>
    </item>
    <item>
      <title>Re: root filesystem disk space and /run/podman/logs/events.log</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/root-filesystem-disk-space-and-run-podman-logs-events-log/m-p/277111#M105463</link>
      <description>&lt;P&gt;I cannot find any information regarding this specific file. That means you have to open TAC case to ask regarding this. But I also know in recent Jumbo's many issues are solved regarding disk space filling up to quickly with different files / backups. What is the version and Jumbo take we are talking about?&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 19 May 2026 13:29:48 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/root-filesystem-disk-space-and-run-podman-logs-events-log/m-p/277111#M105463</guid>
      <dc:creator>Lesley</dc:creator>
      <dc:date>2026-05-19T13:29:48Z</dc:date>
    </item>
    <item>
      <title>Re: root filesystem disk space and /run/podman/logs/events.log</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/root-filesystem-disk-space-and-run-podman-logs-events-log/m-p/277150#M105488</link>
      <description>&lt;P&gt;From a recent TAC case, it seems this will be addressed in a future JHF.&lt;BR /&gt;I also found a possible workaround for this in the meantime:&lt;/P&gt;
&lt;OL&gt;
&lt;LI&gt;&lt;SPAN&gt;Backup and edit "/etc/cpshell/log_rotation.conf" file&lt;/SPAN&gt;&lt;/LI&gt;
&lt;LI&gt;&lt;SPAN&gt;Add the line: /run/libpod/events/events.log 1048576 10&lt;/SPAN&gt;&lt;/LI&gt;
&lt;LI&gt;&lt;SPAN&gt;Reboot, after which / usage should decrease&lt;/SPAN&gt;&lt;/LI&gt;
&lt;/OL&gt;</description>
      <pubDate>Tue, 19 May 2026 17:43:07 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/root-filesystem-disk-space-and-run-podman-logs-events-log/m-p/277150#M105488</guid>
      <dc:creator>PhoneBoy</dc:creator>
      <dc:date>2026-05-19T17:43:07Z</dc:date>
    </item>
  </channel>
</rss>

