topic Re: Questions About Extending /var/log Partition on Firewall in General Topics

Questions About Extending /var/log Partition on Firewall

Chinmaya_Naik — Tue, 10 Dec 2024 09:01:46 GMT

Dear Check Point Community,

Appliance Model: CP-5200

Setup: Distributed

OS:R81.20

Challenge: Export the snapshot backup (Resolved when manually remove the existing file)

I have recently extended the `lv_log` partition size on our Check Point gateway (not the Management Server) using the `lvm_manager` utility.

Below are the current details:

lv_log Partition (After Increase): 200 GB (Previously 60 GB)
Unallocated Disk Space (Remaining): 618 GB

While the activity was completed successfully, I would like to address a few questions to ensure best practices and future compatibility:

1.Impact on Future Operations:

Could this partition extension lead to any performance or operational impacts on the firewall in the long term?

2. Challenges During GAIA OS Upgrades:

Are there any known challenges with GAIA OS upgrades due to changes in partition size for `lv_log`?

3. Best Practices:

What is the recommended partition size for `lv_log` in production environments, and is it ideal to leave this much unallocated space?

Why by default 758 Unallocated Disk Space? because we face challenge to export the Snapshot Backup.

Looking forward to your insights.

@Chinmaya_Naik

Re: Questions About Extending /var/log Partition on Firewall

AkosBakos — Tue, 10 Dec 2024 08:51:50 GMT

Hi @Chinmaya_Naik

What kind of gateway is this? It is a Standalone installation? This is a VM? If yes, what was the process of the disk size increase?

Do you know thus arcticle: https://support.checkpoint.com/results/sk/sk94671

If you did everything as recommended:

Q1: As I know there wont'be any issue.

Q2:No.

Q3:This depends on the amount of the logs. I usually want 14 days of logs keep online.

Akos

Re: Questions About Extending /var/log Partition on Firewall

Chinmaya_Naik — Tue, 10 Dec 2024 09:08:14 GMT

Hi @AkosBakos Thank you for the update

Find the below details:

Appliance Model: CP-5200 GW

Setup: Distributed

OS:R81.20

Challenge: Export the snapshot backup (Resolved when manually remove the existing file).

Such as Jumbo Hotfix , OLD OS file,OLD snapshot and system backup

@Chinmaya_Naik

Re: Questions About Extending /var/log Partition on Firewall

AkosBakos — Tue, 10 Dec 2024 09:07:57 GMT

Hi,

Good to hear that. So, you are not facing any issue right now?

Ákos

Re: Questions About Extending /var/log Partition on Firewall

Chinmaya_Naik — Tue, 10 Dec 2024 09:10:59 GMT

@AkosBakos

Yes currently not facing any issue.

Just few questions I asked to ensure best practices and future compatibility.

@Chinmaya_Naik

Re: Questions About Extending /var/log Partition on Firewall

AkosBakos — Tue, 10 Dec 2024 09:12:45 GMT

If you have any question, just drop a message here, and we will be happy to answer it,

Have a nice day.

Re: Questions About Extending /var/log Partition on Firewall

Chinmaya_Naik — Tue, 10 Dec 2024 09:17:25 GMT

@AkosBakos Thank for the quick reply that's why I like checkmates community.

Which you already answer

1.Impact on Future Operations.
2. Challenges During GAIA OS Upgrades.
3. Best Practices
4.Why by default 758 Unallocated Disk Space because we face challenge to export the Snapshot Backup.

@Chinmaya_Naik

Re: Questions About Extending /var/log Partition on Firewall

PhoneBoy — Tue, 10 Dec 2024 19:16:01 GMT

There should be enough unallocated space to take at least 2-3 snapshots of the root filesystem.
100GB is more than sufficient for that purpose, given your root filesystem is 32GB.
The rest can be allocated for lv_log.