Old files left after upgrades

[Steve_Payne1]

after a few upgrades I've noticed lots of space being used up by previous version

see below for the list,  can i just delete the older version?

1.6G /var/log/opt/CPsuite-R80.20
4.0K /var/log/opt/CPcvpn-R80.30
34M /var/log/opt/CPshrd-R80.40..............................current
334M /var/log/opt/CPSmartLog-R77
28M /var/log/opt/CPshrd-R80.20
12K /var/log/opt/CPcvpn-R80.20
172G /var/log/opt/CPsuite-R80.40..............................current
104K /var/log/opt/CPSmartLog-R80.20
104K /var/log/opt/CPSmartLog-R80.40..............................current
4.0K /var/log/opt/CPcvpn-R80.40..............................current
5.0G /var/log/opt/CPrt-R80.40..............................current
30M /var/log/opt/CPshrd-R80.30
1.1G /var/log/opt/CPsuite-R80
184K /var/log/opt/CPSmartLog-R80
1.1G /var/log/opt/CPrt-R80
147G /var/log/opt/CPrt-R80.30
644M /var/log/opt/CPrt-R77
23M /var/log/opt/CPshrd-R80
23M /var/log/opt/CPshrd-R77
169M /var/log/opt/CPsuite-R77
982M /var/log/opt/CPrt-R80.20
1.2G /var/log/opt/CPsuite-R80.30
112K /var/log/opt/CPSmartLog-R80.30

[Dror_Aharony]

No, I would advise against it, unless you feel something is wrong & that you have less space that you should, then it should be investigated by TAC.

Both logs & their log-Indexes are symbolically linked to previous version's folder (R80.x only).

R80.40 to R80.30 to R80.20 to R80.10, I'd assume in your-case.

meaning the actual space is still taken up by the previous version, allowing you to query your logs from R80.30 & R80.x.

The log-maintenance mechanism either daily configured (which you probably did not configure) or the min threshold knows to delete these, once they are needed.

Configured on the relevant object via Logs > Storage: 'Delete older files when threshold is below X' (by default: threshold = only below 5GB in Logs partition (/var/log/).

as most of the space I see here are the log-files & log-Indexes of existing R80.40 version and the relatively small amount of space taken-up by older R80.x versions suggests these were already deleted in proper order of oldest 1st,  as it should, according to the threshold I've explained.

*Only the 334M = /var/log/opt/CPSmartLog-R77 is excluded due to being an Older I/S of R77.x.

This can be deleted safely, but it's not significant.

[Steve_Payne1]

ok,  thanks for that explanation,  makes sense,  I'll check my settings on deletion

[CheckPointerXL]

Hello Dror,

any updatet script like this one ? https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

it seems that is no longer good for new R81.x versions

it would be very very useful

Thank you