topic Re: Can I increase SD log retention in 1400 appliances? in Spark Firewall (SMB)

Can I increase SD log retention in 1400 appliances?

Pedro_Espindola — Mon, 02 Jul 2018 22:32:57 GMT

Hello guys,

I see logs in the SD card of 1400 appliances are saved on the directories named 0 to 7 and log rotation is frequent.

I have a 16GB SD card but only 1GB (about 5 or 6 days) of logs are being saved.

Is it possible to increase the size or amount of log files saved in the SD card?

Re: Can I increase SD log retention in 1400 appliances?

G_W_Albrecht — Tue, 03 Jul 2018 09:23:48 GMT

SD cars from 8GB and 32GB are supported - and i have read no restriction on log size anywhere. Maybe you should involve TAC, but the 1400 is a maneged SMB, so logs should not be an issue as they are sent to the SMS...

Re: Can I increase SD log retention in 1400 appliances?

Pedro_Espindola — Tue, 03 Jul 2018 14:21:51 GMT

Thanks Gunther.

Unfortunately, this 1400 is a locally managed cluster, so it does not support connection to our SMP or sending logs to a CP log server.

I was trying to send logs via syslog, but got the issues I asked about in Sending syslog from SMB - application fields are blank. Already opened a ticket about that.

I will open another ticket about this one.

Re: Can I increase SD log retention in 1400 appliances?

G_W_Albrecht — Tue, 03 Jul 2018 14:25:24 GMT

Thank you - a ticket is good here because why should the 14x0 Support 32 GB but only save 1GB of logs...

Re: Can I increase SD log retention in 1400 appliances?

Tom_Hinoue — Wed, 04 Jul 2018 01:28:44 GMT

Hey guys.

Actually, I have opened a ticket to TAC about SD card log behavior few months ago, (regarding frequent log rotation, and file size in each folder (0-7) and I believe that RnD is aware of these symptoms and working on a fix.

I'm hoping the fix will be included in the next HFA80 but not guaranteed yet. (I'm asking them now!)
Maybe you can give them a push too

Re: Can I increase SD log retention in 1400 appliances?

Pedro_Espindola — Sat, 21 Jul 2018 16:30:02 GMT

Hello Tomohiro Hinoue‌,

TAC is asking me for information about your ticket so we can merge efforts in this investigation.

Do you have the SR number? You can contact me privately.

Did you get any news on this issue?

Re: Can I increase SD log retention in 1400 appliances?

Tom_Hinoue — Sat, 21 Jul 2018 17:34:22 GMT

Hi Pedro,

I have been asking for updates about the fix, but unfortunately I have not received any news yet.
I will send you an DM later about the case number and details