Old R81.20 directories under /var/log/opt after successful upgrade to R82 - safe to remove?

[Technical_Servi]

Hi everyone,

I successfully upgraded a standalone Security Management Server from R81.20 JHF Take 146 to R82 JHF Take 107 using CPUSE.

The upgrade completed successfully:
- SmartConsole works
- Policy installation to gateways works
- SIC is healthy
- No errors after the upgrade

However, I noticed that the old R81.20 directories are still present under /var/log/opt:

CPSuite-R81.20
CPrt-R81.20
CPshrd-R81.20
CPSmartLog-R81.20

Disk usage:

482G /var/log/opt/CPsuite-R81.20/fw1
62G /var/log/opt/CPrt-R81.20/log_indexes

Running lsof shows:

- No process is using /var/log/opt/CPsuite-R81.20
- A Java process still has files open under:
/var/log/opt/CPrt-R81.20/log_indexes

My questions are:

1. Is it expected that the old R81.20 log indexes remain in use after the upgrade?
2. Is there an official Check Point cleanup procedure or SK article for removing the old R81.20 directories?
3. Once historical logs are no longer required, is it safe to remove the old CPsuite-R81.20 directory manually, or is there a supported method?

Thanks!

[_Val_]

I would not touch any of the "legacy" folders on a SmartCenter server. They are for backward compatibility. Leave them be

[emmap]

The old log folders are covered by the log cleanup procedures, so as they 'age out' they will be reduced in size naturally.