SRX Services Gateway
Showing results for 
Search instead for 
Do you mean 
Reply
Visitor
Posts: 3
Registered: ‎02-08-2017
0 Kudos

SRX220 /jail/var over capacity

[ Edited ]

Hi Everyone,

 

Total Juniper n00b here. Our SRX220 with JUNOS 12.1X44 is running slow and after doing some digging around I learned about System Storage and that it's normal for some things to be at 100%, but we have some items that are over capacity. I have already run 'request system storage cleanup' and 'request system software delete-backup'. Here is the system storage results:

 

> show system storage
Filesystem              Size       Used      Avail  Capacity   Mounted on
/dev/ad0s1a             594M       151M       395M       28%  /
devfs                   1.0K       1.0K         0B      100%  /dev
/dev/md0                390M       390M         0B      100%  /junos
/cf                     594M       151M       395M       28%  /junos/cf
devfs                   1.0K       1.0K         0B      100%  /junos/dev/
procfs                  4.0K       4.0K         0B      100%  /proc
/dev/bo0s3e              46M        36K        42M        0%  /config
/dev/bo0s3f             593M       592M     -46.1M      108%  /cf/var
/dev/md1                336M        18M       291M        6%  /mfs
/cf/var/jail            593M       592M     -46.1M      108%  /jail/var
/cf/var/log             593M       592M     -46.1M      108%  /jail/var/log
devfs                   1.0K       1.0K         0B      100%  /jail/dev
/dev/md2                 63M       4.0K        58M        0%  /mfs/var/run/utm
/dev/md3                1.8M       228K       1.5M       13%  /jail/mfs

 

Can you give me the commands to cleanup those over capacity logs? Thanks in advance!

Distinguished Expert
Posts: 1,109
Registered: ‎08-29-2013
0 Kudos

Re: SRX220 /jail/var over capacity

Can you share below output? This will help us to identify the bigger files. And then we can delete them based on the type, make sure we dont delete the OS files.

root@SRX> start shell user root
root@SRX% du -a /cf | sort -n -r | more

Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too
Visitor
Posts: 3
Registered: ‎02-08-2017
0 Kudos

Re: SRX220 /jail/var over capacity

Certainly. Here you go:

 

1522076 /cf
1212336 /cf/var
1201132 /cf/var/log
1200416 /cf/var/log/httpd.log
291808  /cf/packages
291776  /cf/packages/junos-12.1X44-D35.5-domestic
10740   /cf/var/db
10304   /cf/var/db/idpd
9788    /cf/root
8740    /cf/var/db/idpd/bins
6796    /cf/boot
4768    /cf/var/db/idpd/bins/compiled_ai.bin
3968    /cf/var/db/idpd/bins/compressed_ai.bin
3772    /cf/boot/modules
3744    /cf/boot/modules/mdimage.gz
1480    /cf/var/db/idpd/sec-download
1472    /cf/var/db/idpd/sec-download/detector-capabilities.xml
1312    /cf/boot/uboot
1280    /cf/root/u39r8
1280    /cf/root/s443ls
1280    /cf/root/o9ys
1280    /cf/root/i3306m
1280    /cf/root/g7u2
1280    /cf/root/f6ea
1280    /cf/root/a21jj
928     /cf/boot/ushell
896     /cf/etc
640     /cf/boot/loader
480     /cf/root/isu80
408     /cf/etc/ssh
380     /cf/sbin
376     /cf/sbin/preinit
372     /cf/etc/ssh/primes
324     /cf/root/ys53a
264     /cf/var/jail
208     /cf/var/jail/etc
196     /cf/var/log/messages
152     /cf/etc/services
124     /cf/var/log/chassisd
80      /cf/var/jail/etc/spwd.db
80      /cf/var/jail/etc/pwd.db
80      /cf/etc/spwd.db
80      /cf/etc/pwd.db
72      /cf/var/log/nsd_chk_only
72      /cf/boot/support.4th
48      /cf/var/log/dcd
48      /cf/var/db/ai_cachepcre_cache.db
48      /cf/var/db/ai_cachedfa_group_cache.db
48      /cf/var/db/ai_cachedfa_cache.db
44      /cf/var/db/idpd/db
44      /cf/var/db/certs
44      /cf/etc/db
40      /cf/var/log/jsrpd
40      /cf/boot/defaults
36      /cf/opt
36      /cf/etc/db/manifest
36      /cf/boot/defaults/loader.conf
32      /cf/var/tmp
32      /cf/var/log/wtmp
32      /cf/var/log/messages.1.gz
32      /cf/var/log/messages.0.gz

 

Distinguished Expert
Posts: 5,108
Registered: ‎03-30-2009
0 Kudos

Re: SRX220 /jail/var over capacity

The place to start is to run the Junos clean up command

 

request system storage cleanup

Steve Puluka BSEET
Juniper Ambassador
Senior IP Engineer - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
JNCIA-Junos JNCIS-SEC JNCIP-SEC JNCSP-SEC
JNCIS-FWV
JNCDA JNCDS-DC JNCDS-SEC
JNCIS-SP
ACE PanOS 6 ACE PanOS 7
http://puluka.com/home
Visitor
Posts: 3
Registered: ‎02-08-2017
0 Kudos

Re: SRX220 /jail/var over capacity

Hi Spuluka,

 

Yep... Did that already, it was in my initial post.


spuluka wrote:

The place to start is to run the Junos clean up command

 

request system storage cleanup


 

Super Contributor
Posts: 92
Registered: ‎03-11-2011
0 Kudos

Re: SRX220 /jail/var over capacity

du -ah /cf | sort -n -r | more
will show file sizes in human readible form

remove big logs
rm /var/log/httpd.log
copy it first off the box if you need it

to avoid this in the future you can decrease log rotation frequency from default 15 min
set system syslog log-rotate-frequency 5

Recognized Expert
Posts: 206
Registered: ‎01-06-2016
0 Kudos

Re: SRX220 /jail/var over capacity

Hi,

 

you httpd.log looks strangly big. Do you have any debugging (traceoptions) or syslog configuration for this file? On a test SRX httpd.log is only 8 kB - yours is over 1 GB!

 

I would suggest you to look into the content of the file and verify that you don't need it. then the file can be cleared with 'clear log httpd.log'. 

 

If you are unsure if you need the content, then copy the file to a remote location via scp and then clear the log as stated above.

 

 

--
Best regards,

Jonas Hauge Jensen
Systems Engineer, SEC Datacom A/S (Denmark)
Highlighted
Distinguished Expert
Posts: 1,109
Registered: ‎08-29-2013
0 Kudos

Re: SRX220 /jail/var over capacity

run "file delete /var/log/httpd.log " and check

Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too