- Products
- Learn
- Local User Groups
- Partners
- More
Maestro Masters
Round Table session with Maestro experts
Hello,
Our customer has Maestro setup with 2xMHO140 and 3x6200, single site, single security group as a security gateway (not VSX) running R81.10 with JHF T66. All three SGMs have a very large file /var/log/smartd.log.dbg, currently taking about 38GB. That means /var/log has reached 80% and after one SGM crashed and generated core dump, /var/log/ was full until we deleted core dump. All three SGMs were rebooted last night (fixing some bond MAC address related issue), one at a time.
It seems that the file is not rotating as it should:
# ls -lh /var/log/smartd.log*
-rw-r--r-- 1 admin root 29K Dec 13 03:29 /var/log/smartd.log
-rw-r--r-- 1 admin root 37G Dec 13 10:52 /var/log/smartd.log.dbg
-rw-rw---- 1 admin root 1.1M Oct 11 2022 /var/log/smartd.log.dbg.1
-rw-rw---- 1 admin root 1.1M Oct 11 2022 /var/log/smartd.log.dbg.10
-rw-rw---- 1 admin root 1.1M Oct 11 2022 /var/log/smartd.log.dbg.2
-rw-rw---- 1 admin root 1.1M Oct 11 2022 /var/log/smartd.log.dbg.3
-rw-rw---- 1 admin root 1.1M Oct 11 2022 /var/log/smartd.log.dbg.4
-rw-rw---- 1 admin root 1.1M Oct 11 2022 /var/log/smartd.log.dbg.5
-rw-rw---- 1 admin root 1.1M Oct 11 2022 /var/log/smartd.log.dbg.6
-rw-rw---- 1 admin root 1.1M Oct 11 2022 /var/log/smartd.log.dbg.7
-rw-rw---- 1 admin root 1.1M Oct 11 2022 /var/log/smartd.log.dbg.8
-rw-rw---- 1 admin root 1.1M Oct 11 2022 /var/log/smartd.log.dbg.9
-rw-r--r-- 1 admin root 16K Jan 4 2023 /var/log/smartd.log.err
The file is not listed in /etc/cpshell/log_rotation.conf
# grep "var/log/sm" /etc/cpshell/log_rotation.conf
/var/log/smd_smo.log 524288000 1
/var/log/smd.log 1048576 4
/var/log/smo_rest.log 1048576 10
What is recommended course of action?
Thank you
Please check the sk https://support.checkpoint.com/results/sk/sk179712
Also you can clear the file with echo "" > ./gaia_api_server.log
Please check the sk https://support.checkpoint.com/results/sk/sk179712
Also you can clear the file with echo "" > ./gaia_api_server.log
Thank you,
Since this thread was initially marked as SPAM and not visible, I opened an SR and got the SK from TAC. All fixed now, thank you
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
User | Count |
---|---|
17 | |
6 | |
3 | |
2 | |
1 | |
1 | |
1 | |
1 | |
1 | |
1 |
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY