Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
chkp-idoma
Employee
Employee

*** NEW: Automatic Revisions Purge ***

Hello all,

 

My name is Ido and I’m a software developer in Checkpoint R&D under the Management Products team.

 

I’m happy to announce that starting from today a new feature of Automatic Revisions Purge is available and can be used via API.

See full documentation and examples here: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-automatic-purge~v1.7%20

 

I would like to emphasize that it is very important to use purge in order to clear unused data and by that maintain an optimized disk space and improve the general performance of the Management product.  

We recommend you to configure automatic revisions purge to run once in a month and purge all the revisions which were not created at the last 10 days.

P.S in order to actually reduce the disk space one should open an SR to TAC for running the procedure.


Automatic purge is available in the below jumbo versions:

R80.20(#18), R80.30(#10), R80.40(#6)

And will be available in R81 soon.

 

If you have questions or feedbacks feel free to contact me privately.

Thanks,

Ido  

12 Replies
Luis_Miguel_Mig
Advisor

only via API? Is it not configurable via SmartConsole?

 

chkp-idoma
Employee
Employee

Hi @Luis_Miguel_Mig 

Yes, for now it will be available only via API.

Luis_Miguel_Mig
Advisor

I see you can configure it with the SmartConsole command line and also from the GAIA cli - mgmt.
But I guess that it would be nice if it was in the Smartconsole too

Luis_Miguel_Mig
Advisor

not sure why I am getting this error

mgmt set automatic-purge enabled true keep-sessions-by-days true number-of-days-to-keep 30 scheduling.start-date "2020-10-29T12:00:00"
MGMT9000 code: "generic_err_missing_required_parameters"
message: "Missing parameter: [automatic purge is enabled but missing one of: time-units/check-interval/start-date]"

 

0 Kudos
funkylicious
Advisor

Hi,

Try and put quotes on "30"

chkp-idoma
Employee
Employee

You are missing interval and time-units.

Your command is to: keep revisions published in last 30 days, starting from 2020-10-29T12:00:00, but you need to config also the intervals of when the purge execution itself will be triggered. say you want the purge will be triggered every 3 weeks, your full command should look like this:

mgmt_cli set automatic-purge enabled true keep-sessions-by-count false number-of-days-to-keep "30" scheduling.check-interval "21" scheduling.time-units "days" scheduling.start-date "2020-10-29T12:00:00" --format json

Full examples and more can be found here:

https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-automatic-purge~v1.7%20

 

0 Kudos
Luis_Miguel_Mig
Advisor

oh, cool. Thanks

0 Kudos
G_W_Albrecht
Legend
Legend

 I would really appreciate to find a GUI for this in console - this feature is far too important to be reserved for API nerds and CLI freaks exclusively 😉

CCSE CCTE SMB Specialist
Luis_Miguel_Mig
Advisor

Agree, absolutely

0 Kudos
Alexander_Wilke
Collaborator

Hi,

 

not working for me with this command on a MDS R81.10 JHFA Take 45

 

[Expert@servername:0]# mdsenv MyDomain
[Expert@servername:0]# mgmt_cli -r true set automatic-purge enabled true keep-sessions-by-count false number-of-days-to-keep "5" scheduling.check-interval "1" scheduling.time-units "days" scheduling.start-date "2022-04-29T06:00:00"
code: "err_validation_failed"
message: "Operation is not allowed - can't create automatic purge from global or system domains!"

Executed command failed. Changes are discarded.
[Expert@servername:0]#

 

API Documentation does not tell how to handle this for "Global" Domain and other Domains.

 

I know that this feature was buggy in R80.40 - I had a ticket for that which confirmed these bugs - but not sure why this does not work on R81.10.

0 Kudos
Harald_Hansen
Advisor

You'll probably need to use the domain parameter, as mgmt_cli does not read the mdsenv.

`mgmt_cli -r true domain "MyDomain" ...`
Alexander_Wilke
Collaborator

Thanky for reply. I already opened a ticket at my Diamond Engineer because it is not working. Looks like a bug or another error in our environment. Unfortunately since one week no progress.

Nevertheless. Thank you for your reply.

0 Kudos