*** NEW: Automatic Revisions Purge ***

[chkp-idoma]

Hello all,

My name is Ido and I’m a software developer in Checkpoint R&D under the Management Products team.

I’m happy to announce that starting from today a new feature of Automatic Revisions Purge is available and can be used via API.

See full documentation and examples here: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-automatic-purge~v1.7%20

I would like to emphasize that it is very important to use purge in order to clear unused data and by that maintain an optimized disk space and improve the general performance of the Management product.  

We recommend you to configure automatic revisions purge to run once in a month and purge all the revisions which were not created at the last 10 days.

P.S in order to actually reduce the disk space one should open an SR to TAC for running the procedure.

Automatic purge is available in the below jumbo versions:

R80.20(#18), R80.30(#10), R80.40(#6)

And will be available in R81 soon.

If you have questions or feedbacks feel free to contact me privately.

Thanks,

Ido  

[Luis_Miguel_Mig]

only via API? Is it not configurable via SmartConsole?

[chkp-idoma]

Hi @Luis_Miguel_Mig 

Yes, for now it will be available only via API.

[Luis_Miguel_Mig]

I see you can configure it with the SmartConsole command line and also from the GAIA cli - mgmt.
But I guess that it would be nice if it was in the Smartconsole too

[Luis_Miguel_Mig]

not sure why I am getting this error

mgmt set automatic-purge enabled true keep-sessions-by-days true number-of-days-to-keep 30 scheduling.start-date "2020-10-29T12:00:00"
MGMT9000 code: "generic_err_missing_required_parameters"
message: "Missing parameter: [automatic purge is enabled but missing one of: time-units/check-interval/start-date]"

[funkylicious]

Hi,

Try and put quotes on "30"

[chkp-idoma]

You are missing interval and time-units.

Your command is to: keep revisions published in last 30 days, starting from 2020-10-29T12:00:00, but you need to config also the intervals of when the purge execution itself will be triggered. say you want the purge will be triggered every 3 weeks, your full command should look like this:

mgmt_cli set automatic-purge enabled true keep-sessions-by-count false number-of-days-to-keep "30" scheduling.check-interval "21" scheduling.time-units "days" scheduling.start-date "2020-10-29T12:00:00" --format json

Full examples and more can be found here:

https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-automatic-purge~v1.7%20

[Luis_Miguel_Mig]

oh, cool. Thanks

[G_W_Albrecht]

 I would really appreciate to find a GUI for this in console - this feature is far too important to be reserved for API nerds and CLI freaks exclusively 😉

[Luis_Miguel_Mig]

Agree, absolutely

[Alexander_Wilke]

Hi,

not working for me with this command on a MDS R81.10 JHFA Take 45

[Expert@servername:0]# mdsenv MyDomain
[Expert@servername:0]# mgmt_cli -r true set automatic-purge enabled true keep-sessions-by-count false number-of-days-to-keep "5" scheduling.check-interval "1" scheduling.time-units "days" scheduling.start-date "2022-04-29T06:00:00"
code: "err_validation_failed"
message: "Operation is not allowed - can't create automatic purge from global or system domains!"

Executed command failed. Changes are discarded.
[Expert@servername:0]#

API Documentation does not tell how to handle this for "Global" Domain and other Domains.

I know that this feature was buggy in R80.40 - I had a ticket for that which confirmed these bugs - but not sure why this does not work on R81.10.

[Harald_Hansen]

You'll probably need to use the domain parameter, as mgmt_cli does not read the mdsenv.

`mgmt_cli -r true domain "MyDomain" ...`

[Alexander_Wilke]

Thanky for reply. I already opened a ticket at my Diamond Engineer because it is not working. Looks like a bug or another error in our environment. Unfortunately since one week no progress.

Nevertheless. Thank you for your reply.

[Alexander_Wilke]

Hello,

we got feedback some months ago:

Automatic Purge on the Global domain is not possible "out of the box".

Global Revisions may contain information from local domains and if you purge the global it may also delete things needed for still existing local revisions.

So there is not internal check if the deleted global revision may affect local revisions or not so R&D deleted the global automatic purge on the API to save the customer from doing wrong things.

However - they allow it on global domain via SmartConsole and the same issues may occure that you delete things on the global which may affetc the local domain's revisions.