topic Re: GATEWAY / partition getting filled due to cpda.rpm increase. please advice how to clear the fi in Firewall and Security Management

GATEWAY / partition getting filled due to cpda.rpm increase. please advice how to clear the file.

Duminda_SAT — Mon, 06 Dec 2021 04:49:06 GMT

Gateway root Partition getting filled due to cpda.rpm increase. please advice how to clear this file, is it okay to use rm -r /CPda.rpm

ls -l output in "/" location.

-rwxr-xr-x 1 admin root 28113989 Mar 25 2021 CPda.rpm

Thank you,

Duminda Lakmal.

Re: GATEWAY / partition getting filled due to cpda.rpm increase. please advice how to clear the fi

G_W_Albrecht — Mon, 06 Dec 2021 09:07:39 GMT

Where did you get this file from ? CP Deployment Agent installer usually is very small...

Re: GATEWAY / partition getting filled due to cpda.rpm increase. please advice how to clear the fi

Amogha_Chandras — Tue, 07 Dec 2021 09:09:15 GMT

First of all, we need to discover which files in the /var/log partition is taking up a large amount of space.

this command can be used to check which files or directories are consuming the highest space
# du -h --max-depth=1 /var/log | sort -n -r

In the above , the /var/log/ is taken as an example

Furthermore, you can refine the search by specifying a sub-directory of the /var/log path:
# du -h --max-depth=1 /var/log/CPbackup | sort -n -r

Here's another tip for discovering large files:

find /var/log/ -type f -size +250M -exec ls -lh {} \;

That command will find files above 250MB, however, you can easily modify it to find files of a smaller size.

However, if logs are taking up a lot of space, the old ones could be migrated to another machine.

For information on migrating log files, refer to sk92440 - Move log files off Security Management Server for viewing at a later time

http://supportcontent.checkpoint.com/solutions?id=sk92440

In the case you would need to store those log files in a compressed format, you can use the previous sk (sk92440) with the tar command:

# tar cvf

For example:
# tar czvf logfile 2017-05-29* (a day)
# tar czvf logfile 2017-05* (a month)
# tar czvf logfile *.log (all logs)

Should you be unsure about deleting any specific files in /var/log, please open a TAC ticket

However, we suspect that you probably have large files in the following directories (which can be safely migrated or moved):

/var/log/CPda/repository/
/var/log/CPbackup/

Please open a TAC ticket to check further

Re: GATEWAY / partition getting filled due to cpda.rpm increase. please advice how to clear the fi

Duminda_SAT — Tue, 07 Dec 2021 11:17:39 GMT

Thank you so much, Albrecht & Amogha,

I will open a TAC Case.

Thank you,

Duminda Lakmal

Re: GATEWAY / partition getting filled due to cpda.rpm increase. please advice how to clear the fi

Duminda_SAT — Tue, 07 Dec 2021 11:46:41 GMT

Yes, CPda very small file but in this device i have notified entire "/" (root partition) filled. due to this file, this was located on root partition not any folder "/cpda.rpm "

Re: GATEWAY / partition getting filled due to cpda.rpm increase. please advice how to clear the fi

G_W_Albrecht — Wed, 08 Dec 2021 08:21:39 GMT

What was the content - i doubt this is a rpm. Would be important which process(es) created and wrote to the file.