CPZetc log folder

[ibucur]

Hi

Kindly ask for a suggestion regarding the following issue:

on a virtual gateway I found the following:

[Expert@sgw-l3-ipsec-205:0]# df -hk
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/mapper/vg_splat-lv_current 16766976 8614048 8152928 52% /
/dev/vda1 297485 27571 254554 10% /boot
tmpfs 3952744 6812 3945932 1% /dev/shm
/dev/mapper/vg_splat-lv_log 12572672 12572652 20 100% /var/log

log partition full.

further investigating:

[Expert@sgw-l3-ipsec-205:0]# du -h --max-depth=1 /var/log/
0 /var/log/ppp
0 /var/log/CPbackup
0 /var/log/ntpstats
19M /var/log/audit
0 /var/log/dump
0 /var/log/image
30M /var/log/sa
0 /var/log/CPsnapshot
0 /var/log/tmp
0 /var/log/cpupgrade
1.5G /var/log/opt
0 /var/log/dlp
0 /var/log/spool
0 /var/log/upload
0 /var/log/download
0 /var/log/upgrade
9.6M /var/log/CPda
8.2M /var/log/blink
0 /var/log/diagnostics
0 /var/log/crash
16K /var/log/routed_db
8.0K /var/log/sensor
1.1G /var/log/AutoUpdater
67M /var/log/CPDepInst
4.0K /var/log/autoupdater_hcp_install_info
0 /var/log/cvpn_file_upload
du: cannot access '/var/log/jail/proc/5944/task/5944/fd/3': No such file or directory
du: cannot access '/var/log/jail/proc/5944/task/5944/fdinfo/3': No such file or directory
du: cannot access '/var/log/jail/proc/5944/fd/4': No such file or directory
du: cannot access '/var/log/jail/proc/5944/fdinfo/4': No such file or directory
3.2G /var/log/jail
0 /var/log/usim_crash
80K /var/log/db_upgrade
56K /var/log/spike_detective
9.1G /var/log/CPzetc
4.0K /var/log/autoupdater_cpsdc_install_info
4.0K /var/log/autoupdater_ender_install_info
15G /var/log/

DIdn't find any info about the meaning of such CPzetc folder

further:

[Expert@sgw-l3-ipsec-205:0]# du -h --max-depth=1 /var/log//CPzetc/logs
9.1G /var/log//CPzetc/logs
[Expert@sgw-l3-ipsec-205:0]# ls
CloudConfig.log CloudConfigNetwork.log zetc_collector.xml

asg command to view log file is not found.

Any suggestion if is safe to delete CPzetc folder in order to free storage? 

/var/log/CPbackup -  is empty

Many thanks

[G_W_Albrecht]

Never delete folders ! Look at time and date to see what can be deleted and only delete large files.

[ibucur]

Hi

thank you very much for reply

I did check and below are the results:

[Expert@sgw-l3-ipsec-205:0]# stat /var/log/CPzetc/logs/CloudConfig.log
File: '/var/log/CPzetc/logs/CloudConfig.log'
Size: 3781152833 Blocks: 7385448 IO Block: 4096 regular file
Device: fc00h/64512d Inode: 25176111 Links: 1
Access: (0660/-rw-rw----) Uid: ( 0/ admin) Gid: ( 0/ root)
Access: 2023-04-20 15:43:23.646000000 +0300
Modify: 2024-06-04 10:09:51.160000000 +0300
Change: 2024-06-04 10:09:51.160000000 +0300
Birth: -

[Expert@sgw-l3-ipsec-205:0]# stat /var/log/CPzetc/logs/CloudConfigNetwork.log
File: '/var/log/CPzetc/logs/CloudConfigNetwork.log'
Size: 5982400599 Blocks: 11684792 IO Block: 4096 regular file
Device: fc00h/64512d Inode: 25176112 Links: 1
Access: (0660/-rw-rw----) Uid: ( 0/ admin) Gid: ( 0/ root)
Access: 2023-04-20 15:43:25.001000000 +0300
Modify: 2024-06-04 10:09:51.339000000 +0300
Change: 2024-06-04 10:09:51.339000000 +0300
Birth: -
[Expert@sgw-l3-ipsec-205:0]# stat /var/log/CPzetc/logs/zetc_collector.xml
File: '/var/log/CPzetc/logs/zetc_collector.xml'
Size: 4241 Blocks: 16 IO Block: 4096 regular file
Device: fc00h/64512d Inode: 25176105 Links: 1
Access: (0660/-rw-rw----) Uid: ( 0/ admin) Gid: ( 0/ root)
Access: 2024-06-04 08:04:03.074000000 +0300
Modify: 2023-11-06 12:45:59.109000000 +0200
Change: 2023-11-06 12:45:59.109000000 +0200
Birth: -

so one 5gb file and one 3 gb file, both logs.

[PhoneBoy]

CPzetc appears to be related to: https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Check-Point-SmartCloud-Admin-...
Whether or not the logs can be safely removed is a question for TAC.

[G_W_Albrecht · Accepted solution]

As this is a VM you should be able to add more disk space, see https://support.checkpoint.com/results/sk/sk94671 !

[ibucur]

thank you

[Arthur_DENIS1]

IMHO, it's a bug...

I got this on few gateways, the rotation on .log files seems to be not working as exepected.
I've performed the deletion of .log files to get enough space for the upgrade, without issue.

Not noticed this on last JHF.

[G_W_Albrecht]

I do not understand why log files are accumulating on the GW - they should do that on the SMS ! The size occupied by log files is set in Dashboard by the admin.

[ibucur]

Is annoiyng to see the logs files increasing and increasing and the recommandations are to not delete them because some problems may occur. Instead of that to increase the disk size. Till which size?

In many other products, the log files has no relation with the corect future functioning of the product.