SRX Services Gateway
SRX Services Gateway

SRX220 /jail/var over capacity

[ Edited ]
02.08.17   |  
‎02-08-2017 05:29 PM

Hi Everyone,

 

Total Juniper n00b here. Our SRX220 with JUNOS 12.1X44 is running slow and after doing some digging around I learned about System Storage and that it's normal for some things to be at 100%, but we have some items that are over capacity. I have already run 'request system storage cleanup' and 'request system software delete-backup'. Here is the system storage results:

 

> show system storage
Filesystem              Size       Used      Avail  Capacity   Mounted on
/dev/ad0s1a             594M       151M       395M       28%  /
devfs                   1.0K       1.0K         0B      100%  /dev
/dev/md0                390M       390M         0B      100%  /junos
/cf                     594M       151M       395M       28%  /junos/cf
devfs                   1.0K       1.0K         0B      100%  /junos/dev/
procfs                  4.0K       4.0K         0B      100%  /proc
/dev/bo0s3e              46M        36K        42M        0%  /config
/dev/bo0s3f             593M       592M     -46.1M      108%  /cf/var
/dev/md1                336M        18M       291M        6%  /mfs
/cf/var/jail            593M       592M     -46.1M      108%  /jail/var
/cf/var/log             593M       592M     -46.1M      108%  /jail/var/log
devfs                   1.0K       1.0K         0B      100%  /jail/dev
/dev/md2                 63M       4.0K        58M        0%  /mfs/var/run/utm
/dev/md3                1.8M       228K       1.5M       13%  /jail/mfs

 

Can you give me the commands to cleanup those over capacity logs? Thanks in advance!

7 REPLIES
SRX Services Gateway

Re: SRX220 /jail/var over capacity

02.08.17   |  
‎02-08-2017 06:22 PM

Can you share below output? This will help us to identify the bigger files. And then we can delete them based on the type, make sure we dont delete the OS files.

root@SRX> start shell user root
root@SRX% du -a /cf | sort -n -r | more

Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too
SRX Services Gateway

Re: SRX220 /jail/var over capacity

02.09.17   |  
‎02-09-2017 04:18 AM

Certainly. Here you go:

 

1522076 /cf
1212336 /cf/var
1201132 /cf/var/log
1200416 /cf/var/log/httpd.log
291808  /cf/packages
291776  /cf/packages/junos-12.1X44-D35.5-domestic
10740   /cf/var/db
10304   /cf/var/db/idpd
9788    /cf/root
8740    /cf/var/db/idpd/bins
6796    /cf/boot
4768    /cf/var/db/idpd/bins/compiled_ai.bin
3968    /cf/var/db/idpd/bins/compressed_ai.bin
3772    /cf/boot/modules
3744    /cf/boot/modules/mdimage.gz
1480    /cf/var/db/idpd/sec-download
1472    /cf/var/db/idpd/sec-download/detector-capabilities.xml
1312    /cf/boot/uboot
1280    /cf/root/u39r8
1280    /cf/root/s443ls
1280    /cf/root/o9ys
1280    /cf/root/i3306m
1280    /cf/root/g7u2
1280    /cf/root/f6ea
1280    /cf/root/a21jj
928     /cf/boot/ushell
896     /cf/etc
640     /cf/boot/loader
480     /cf/root/isu80
408     /cf/etc/ssh
380     /cf/sbin
376     /cf/sbin/preinit
372     /cf/etc/ssh/primes
324     /cf/root/ys53a
264     /cf/var/jail
208     /cf/var/jail/etc
196     /cf/var/log/messages
152     /cf/etc/services
124     /cf/var/log/chassisd
80      /cf/var/jail/etc/spwd.db
80      /cf/var/jail/etc/pwd.db
80      /cf/etc/spwd.db
80      /cf/etc/pwd.db
72      /cf/var/log/nsd_chk_only
72      /cf/boot/support.4th
48      /cf/var/log/dcd
48      /cf/var/db/ai_cachepcre_cache.db
48      /cf/var/db/ai_cachedfa_group_cache.db
48      /cf/var/db/ai_cachedfa_cache.db
44      /cf/var/db/idpd/db
44      /cf/var/db/certs
44      /cf/etc/db
40      /cf/var/log/jsrpd
40      /cf/boot/defaults
36      /cf/opt
36      /cf/etc/db/manifest
36      /cf/boot/defaults/loader.conf
32      /cf/var/tmp
32      /cf/var/log/wtmp
32      /cf/var/log/messages.1.gz
32      /cf/var/log/messages.0.gz

 

SRX Services Gateway

Re: SRX220 /jail/var over capacity

02.11.17   |  
‎02-11-2017 07:49 AM

The place to start is to run the Junos clean up command

 

request system storage cleanup

Steve Puluka BSEET
Juniper Ambassador
Senior IP Engineer - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
JNCIA-Junos JNCIS-SEC JNCIP-SEC JNCSP-SEC
JNCIS-FWV
JNCDA JNCDS-DC JNCDS-SEC
JNCIS-SP
ACE PanOS 6 ACE PanOS 7
http://puluka.com/home
SRX Services Gateway

Re: SRX220 /jail/var over capacity

02.11.17   |  
‎02-11-2017 01:41 PM

Hi Spuluka,

 

Yep... Did that already, it was in my initial post.


spuluka wrote:

The place to start is to run the Junos clean up command

 

request system storage cleanup


 

SRX Services Gateway

Re: SRX220 /jail/var over capacity

02.12.17   |  
‎02-12-2017 12:18 PM

du -ah /cf | sort -n -r | more
will show file sizes in human readible form

remove big logs
rm /var/log/httpd.log
copy it first off the box if you need it

to avoid this in the future you can decrease log rotation frequency from default 15 min
set system syslog log-rotate-frequency 5

SRX Services Gateway

Re: SRX220 /jail/var over capacity

02.12.17   |  
‎02-12-2017 12:24 PM

Hi,

 

you httpd.log looks strangly big. Do you have any debugging (traceoptions) or syslog configuration for this file? On a test SRX httpd.log is only 8 kB - yours is over 1 GB!

 

I would suggest you to look into the content of the file and verify that you don't need it. then the file can be cleared with 'clear log httpd.log'. 

 

If you are unsure if you need the content, then copy the file to a remote location via scp and then clear the log as stated above.

 

 

--
Best regards,

Jonas Hauge Jensen
Systems Engineer, SEC Datacom A/S (Denmark)
Highlighted
SRX Services Gateway

Re: SRX220 /jail/var over capacity

02.13.17   |  
‎02-13-2017 08:38 PM

run "file delete /var/log/httpd.log " and check

Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too