Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Blason_R
Leader
Leader
Jump to solution

log_indexer unable to index all the files

Hi Team,

we are on R80.20 Smart 1 appliance and previously due to the memory crunch Smart log wasn't activated. However recently we upgraded to 16GB of RAM and enable the log_indexing; installed the database. The process has successfully started and able to start indexing however we could see it was able to index only last 2 days of files in 14 hrs. 

I checked the logs and this is currently indexing existing files/logs however it not picking up the earlier logs. The process is alive and the same can be spotted from cpwd_admin list.

Any hint would be appreciated.

Thanks and Regards,
Blason R
CCSA,CCSE,CCCS
0 Kudos
1 Solution

Accepted Solutions
Blason_R
Leader
Leader

By the way according to the sk I need to run log_indexer command, but unsure the exact flags needs to run.

has anyone have any experience with the flag or if someone can confirm below command is correct?

./log_indexer -days_to_index <NUM_OF_DAYS_TO_INDEX>

i.e.

./log_indexer -days_to_index 30 

 

 

Thanks and Regards,
Blason R
CCSA,CCSE,CCCS

View solution in original post

0 Kudos
4 Replies
Wolfgang
Authority
Authority

@Blason_R 

see R80.x SmartLog/SmartEvent server doesn't index/show logs older than 1-14 days back 

to enable the indexer to process your older logs.

Wolfgang

0 Kudos
Blason_R
Leader
Leader

yes - was aware of that let me try that option.

Thanks for pointing it out.

Thanks and Regards,
Blason R
CCSA,CCSE,CCCS
0 Kudos
Blason_R
Leader
Leader

By the way according to the sk I need to run log_indexer command, but unsure the exact flags needs to run.

has anyone have any experience with the flag or if someone can confirm below command is correct?

./log_indexer -days_to_index <NUM_OF_DAYS_TO_INDEX>

i.e.

./log_indexer -days_to_index 30 

 

 

Thanks and Regards,
Blason R
CCSA,CCSE,CCCS
0 Kudos
JakubSykora
Explorer
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events