Help with older logs removal in /var/log for r80.40

[Raydar32]

Good evening to all of you.

I have this Checkpoint R80.40 Firewall cluster. Our monitoring system is signaling that space on /var/logs is going full.

I've noticed that 80% of the space of that partition if occupied by /var/log/opt/CPSuite-R80/fw1/log/ in which there are a lot of files such as "2020-06-02_000000.log" and so on.

I have just a few questions:

• What can i do to flush the space on it?
• What is the purpouse of this folder?
• Is it safe to remove everything? (I can organize to do a backup in another server)
• Should i stop some services?
• How will the cluster behave? Will the node disalign?

I tried to look around for some SKs and similar posts but these are all quite old and for other (but similar) issues.

Maybe this thread could hopefully help other people.

I did not find any official and standardized procedure to clean /var/log.

Thanks a lot in advance.

A.

[_Val_]

FW GW can log locally in some cases. If you do not need some of those logs, you can manually remove those with the timestamp as a name, with something like "rm <year-month-*>" command

Nothing needs to be stopped, those loge files are closed already.