R82 Take 36 is definitely taking backup of logs as well ended in a huge file size

[Blason_R]

Hi Team,

We began to notice an issue wherever Take 36 is installed on the management server running version R82. Wherever we have installed R82 HFA Take 36, and subsequently performed a system backup, it backs up the $FWDIR/log/*log files, ultimately resulting in a significantly large backup size.

Has anyone observed this before?

[MatanYanay · Accepted solution]

Hi @Blason_R 

Please review https://support.checkpoint.com/results/sk/sk183835 

A fix for the issue will be released in the upcoming jumbos we will release n the next 2-3 weeks 

[Blason_R]

Thanks - I am closing this chat

[Henrik_Noerr1]

Hey @MatanYanay ,

I asked our CAM directly if the change was intentional and here to stay, or if it would be fixed in a near jumbo.

I was told that the change is intentional and here to stay, and we should apply any exceptions in the file listed in the sk manually.

Now I read your answer: "A fix for the issue will be released" - So what is it. Will the backup of logs be removed again in upcoming jumbo?

I don't want to modify and maintain this exclusion if the change is rolled back automatically in jumbo t111++

Thanks,

Henrik

[MatanYanay]

Hi @Henrik_Noerr1 

The issue comes from the fact that the file
/var/CPbackup/schemes/fw1logs.cpbak
contains an instruction to back up the logs directory (which is not required).

This file will be replaced in the next jumbo.
If you replace/update it manually, it will not affect the jumbo’s operation, and it will be overwritten again with the correct one after the installation.

[Chris_Atkinson]

This was recently discussed here aswell: https://community.checkpoint.com/t5/General-Topics/SMS-size-of-backup-file/m-p/255615#M42969