topic Re: Delete old log of SG and SM in General Topics

Delete old log of SG and SM

mbckymber — Wed, 16 Mar 2022 09:38:12 GMT

Morning

I have my SG and SM with directory /var/log 100% of use.

[Expert@bda-checkpoint-sg:0]# df -h
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/vg_splat-lv_current
32G 8.4G 22G 28% /
/dev/sda1 289M 51M 223M 19% /boot
tmpfs 3.8G 16K 3.8G 1% /dev/shm
/dev/mapper/vg_splat-lv_log
70G 68G 0 100% /var/log
tmpfs 774M 4.0K 774M 1% /mnt/dlprd

[Expert@bda-checkpoint-sm:0]# df -h
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/vg_splat-lv_current 32G 9.6G 23G 30% /
/dev/sda1 291M 25M 251M 9% /boot
tmpfs 7.8G 4.0K 7.8G 1% /dev/shm
/dev/mapper/vg_splat-lv_log 245G 239G 6.0G 98% /var/log

How can i do to remove a old log entries to have a 20% available.
Is possible to move this log on windows server via filezila ?

Re: Delete old log of SG and SM

Chris_Atkinson — Wed, 16 Mar 2022 22:31:12 GMT

To start how are the following options configured?

To address the current space issues where the root cause isn't necessarily log data please review the following:

sk60080: Disk space tips and tricks for SecurePlatform / Gaia / IPSO / Linux OS

sk126732: /var/log/ and /var/log/auth directories consume large amount of disk space

Re: Delete old log of SG and SM

G_W_Albrecht — Wed, 16 Mar 2022 11:55:52 GMT

1. Usually, logs get indexed and collected on SMS - so they should not fill up the GW !

2. See here: https://community.checkpoint.com/t5/Management/Firewall-Log-Archive-and-Import-in-R80-10-R77-30/m-p/31526

Re: Delete old log of SG and SM

mbckymber — Wed, 16 Mar 2022 12:22:52 GMT

i have this on my mgmt

Re: Delete old log of SG and SM

G_W_Albrecht — Wed, 16 Mar 2022 12:40:46 GMT

I would choose to delete old index files...

Re: Delete old log of SG and SM

mbckymber — Wed, 16 Mar 2022 12:57:40 GMT

after choose this option , it will deleting automatically and increase the space on my partition right ?