R81.10 SMS Smart Event warning about space lower than required

[K_montalvo]

Hello experts & friends,

How do you guys normally deal with the error: Partition /var/log has: X of free space and it's lower than required: 2000 MB with the SMS on r81.10 ?

(Attached screenshot), i saw somewhere a documentation about configuring when reach 85% deleted old logs.

[Expert@SMS0]# df -h
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/vg_splat-lv_current 50G 14G 34G 29% /
/dev/sda1 289M 42M 233M 16% /boot
tmpfs 7.8G 28M 7.7G 1% /dev/shm
/dev/mapper/vg_splat-lv_log 582G 549G 2.5G 100% /var/log
cgroup 7.8G 0 7.8G 0% /sys/fs/cgroup
[Expert@SMS:0]#

Thanks,

[the_rock]

Hey brother,

Hope you are well. This is what I always do...JUST BE CAREFUL not to delete any database files, as that can mess up server 100%. Say you wish to look for files larger than 200 MB in /var/log dir, you run below:

find /var/log -size +200000000c

If you want to check 400 MB or higher, just replace 2 with 4 and you can also input any desired directory.

Below is output from my lab R81.10 mgmt:

[Expert@MANAGEMENT:0]# find /var/log -size +200000000c
/var/log/opt/CPshrd-R81/cpview_services/CPViewDB_1613088730.dat
/var/log/opt/CPshrd-R81/cpview_services/CPViewDB_1631293513.dat
/var/log/opt/CPsuite-R81/fw1/log/cpm_doctor/diff_26_05_2021+25_05_2021.tgz
/var/log/opt/CPsuite-R81.10/fw1/log/out.csv
/var/log/opt/CPshrd-R81.10/cpview_services/CPViewDB_1634946527.dat
[Expert@MANAGEMENT:0]#

I would NOT delete any .dat files.

You can also refer to below link, its very useful:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

Cheers,

Andy

[K_montalvo]

Thanks brother!

[the_rock · Accepted solution]

For you, no charge ; ). By the way, below is setting you want to check on mgmt server object.

Andy

 

[the_rock]

Also, just my personal opinion, because with R80+, since database had changed significantly, everything seems to take up more space, so I would probably start deleting stuff once it reaches 80%...but thats just me : - )