Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
renatoleon
Participant
Jump to solution

Details about log files in /var/log/opt/CPsuite-R82/fw1/log/Worker1/

Hi CheckMates,

Sorry for simple question, searched but found no reference nor DOC about it

I have a gateway with /var/log/ with less than 5% free space

I can see log files like this one:

[Expert@xxx:0]# ls -lh /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000*
-rw-rw---- 1 admin root 9.1K Mar 3 00:00 /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000.adtlog
-rw-rw---- 1 admin root 80 Mar 2 00:00 /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000.adtlogaccount_ptr
-rw-rw---- 1 admin root 92 Mar 2 11:46 /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000.adtloginitial_ptr
-rw-rw---- 1 admin root 104 Mar 2 11:46 /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000.adtlogptr
-rw-rw---- 1 admin root 901M Mar 3 00:00 /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000.log
-rw-rw---- 1 admin root 80 Mar 2 00:00 /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000.logaccount_ptr
-rw-rw---- 1 admin root 20M Mar 3 00:00 /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000.loginitial_ptr
-rw-rw---- 1 admin root 39M Mar 3 00:00 /var/log/opt/CPsuite-R82/fw1/log/Worker1/Worker1_2026-03-03_000000.logptr
[Expert@xxx:0]#

Analyzing file structure in Worker1 directory, seems fw.log was moved. If this is confirmed, probably this gateway loss connection to the Manager at some point and now its safe to delete those files, isnt it?

 

many thanks in advance,

Leon

0 Kudos
1 Solution

Accepted Solutions
Lesley
MVP Gold
MVP Gold

You can delete those files. The /var/log/opt/CPsuite-R82/fw1/log/worker1.elg will show when and with what log server the firewall had issues, it will show something like: 

[Worker1 21231]@cp-[20 Sep 23:21:04] 23:21:04: srv_disconnected: change <IP> status to Status ERROR description: Log-Server Disconnected

 

-------
Please press "Accept as Solution" if my post solved it 🙂

View solution in original post

1 Reply
Lesley
MVP Gold
MVP Gold

You can delete those files. The /var/log/opt/CPsuite-R82/fw1/log/worker1.elg will show when and with what log server the firewall had issues, it will show something like: 

[Worker1 21231]@cp-[20 Sep 23:21:04] 23:21:04: srv_disconnected: change <IP> status to Status ERROR description: Log-Server Disconnected

 

-------
Please press "Accept as Solution" if my post solved it 🙂

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events