<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Details about log files in /var/log/opt/CPsuite-R82/fw1/log/Worker1/ in General Topics</title>
    <link>https://community.checkpoint.com/t5/General-Topics/Details-about-log-files-in-var-log-opt-CPsuite-R82-fw1-log/m-p/277106#M46192</link>
    <description>&lt;P&gt;You can delete those files. The&amp;nbsp;&lt;SPAN&gt;/var/log/opt/CPsuite-R82/fw1/log/worker1.elg will show when and with what log server the firewall had issues, it will show something like:&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;[Worker1 21231]@cp-[20 Sep 23:21:04] 23:21:04: srv_disconnected: change &amp;lt;IP&amp;gt; status to Status ERROR description: Log-Server Disconnected&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Tue, 19 May 2026 13:17:44 GMT</pubDate>
    <dc:creator>Lesley</dc:creator>
    <dc:date>2026-05-19T13:17:44Z</dc:date>
    <item>
      <title>Details about log files in /var/log/opt/CPsuite-R82/fw1/log/Worker1/</title>
      <link>https://community.checkpoint.com/t5/General-Topics/Details-about-log-files-in-var-log-opt-CPsuite-R82-fw1-log/m-p/277101#M46189</link>
      <description>&lt;P&gt;Hi CheckMates,&lt;/P&gt;&lt;P&gt;Sorry for simple question, searched but found no reference nor DOC about it&lt;/P&gt;&lt;P&gt;I have a gateway with /var/log/ with less than 5% free space&lt;/P&gt;&lt;P&gt;I can see log files like this one:&lt;/P&gt;&lt;P&gt;[Expert@xxx:0]# ls -lh /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000*&lt;BR /&gt;-rw-rw---- 1 admin root 9.1K Mar 3 00:00 /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000.adtlog&lt;BR /&gt;-rw-rw---- 1 admin root 80 Mar 2 00:00 /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000.adtlogaccount_ptr&lt;BR /&gt;-rw-rw---- 1 admin root 92 Mar 2 11:46 /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000.adtloginitial_ptr&lt;BR /&gt;-rw-rw---- 1 admin root 104 Mar 2 11:46 /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000.adtlogptr&lt;BR /&gt;-rw-rw---- 1 admin root 901M Mar 3 00:00 /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000.log&lt;BR /&gt;-rw-rw---- 1 admin root 80 Mar 2 00:00 /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000.logaccount_ptr&lt;BR /&gt;-rw-rw---- 1 admin root 20M Mar 3 00:00 /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000.loginitial_ptr&lt;BR /&gt;-rw-rw---- 1 admin root 39M Mar 3 00:00 /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000.logptr&lt;BR /&gt;[Expert@xxx:0]#&lt;/P&gt;&lt;P&gt;Analyzing file structure in Worker1 directory, seems fw.log was moved. If this is confirmed, probably this gateway loss connection to the Manager at some point and now its safe to delete those files, isnt it?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;many thanks in advance,&lt;/P&gt;&lt;P&gt;Leon&lt;/P&gt;</description>
      <pubDate>Tue, 19 May 2026 12:48:04 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/Details-about-log-files-in-var-log-opt-CPsuite-R82-fw1-log/m-p/277101#M46189</guid>
      <dc:creator>renatoleon</dc:creator>
      <dc:date>2026-05-19T12:48:04Z</dc:date>
    </item>
    <item>
      <title>Re: Details about log files in /var/log/opt/CPsuite-R82/fw1/log/Worker1/</title>
      <link>https://community.checkpoint.com/t5/General-Topics/Details-about-log-files-in-var-log-opt-CPsuite-R82-fw1-log/m-p/277106#M46192</link>
      <description>&lt;P&gt;You can delete those files. The&amp;nbsp;&lt;SPAN&gt;/var/log/opt/CPsuite-R82/fw1/log/worker1.elg will show when and with what log server the firewall had issues, it will show something like:&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;[Worker1 21231]@cp-[20 Sep 23:21:04] 23:21:04: srv_disconnected: change &amp;lt;IP&amp;gt; status to Status ERROR description: Log-Server Disconnected&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 19 May 2026 13:17:44 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/Details-about-log-files-in-var-log-opt-CPsuite-R82-fw1-log/m-p/277106#M46192</guid>
      <dc:creator>Lesley</dc:creator>
      <dc:date>2026-05-19T13:17:44Z</dc:date>
    </item>
  </channel>
</rss>

