SRX Services Gateway
Showing results for 
Search instead for 
Do you mean 
Reply
Recognized Expert
Posts: 609
Registered: ‎05-28-2015
0 Kudos

Policy hit count

Hi

 

Does the number of hits displayed in the "show security policies hit-count" has a timeout ?

I mean, is it reseting the hit-count automatically after X days ?

Or just after reaching a X hits , then it is reseting ?

 

 

 

Regards,
A'bed AL-R.
[JNCSP-SEC JNCDA Ingenious Champion]
https://srxtech.wordpress.com
Distinguished Expert
Posts: 1,109
Registered: ‎08-29-2013
0 Kudos

Re: Policy hit count

AFAIK, this counter only clears with Reboot. There may be a limit on the number of hits, but I expect it will be too large .
Are you facing any issues?
Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too
Recognized Expert
Posts: 609
Registered: ‎05-28-2015
0 Kudos

Re: Policy hit count

Hi Suraj

No , Not realy facing any critical issue ..
Just wanted to perform deletion of all policies witch is having 0 hit-counts and I can see too many .. So I wanted to know i the hit-count resets automatically in case the device didn't reboot ..

Regards,
A'bed AL-R.
[JNCSP-SEC JNCDA Ingenious Champion]
https://srxtech.wordpress.com
Highlighted
Super Contributor
Posts: 88
Registered: ‎07-19-2016
0 Kudos

Re: Policy hit count

Hi 

 

In a cluster, the count is a sum of all the Services Processing Cards (SPC) hit counts; it is cluster-wide. If a Packet Forwarding Engine (PFE) in a node is in failover mode, but does not reboot, the counter persists. If a node reboots, the PFE in the node also reboots, and the counter is cleared. During an in-service software upgrade (ISSU), all PFEs reboot, therefore all counters are cleared.

 

Regards,

Anand

[KUDOS PLEASE! If you think I earned it!
If this solution worked for you please flag my post as an "Accepted Solution" so others can benefit..]