var/log space is full even after clearing the firewall logs in management server (Checkpoint)

If you are a firewall administrator you might have faced this issue in various occasions.

When Smartview monitor shows as var/log full then login to CLI and check with the command df  –k to ensure the space availability.

Usually when the Var/log is full then the few recommended steps are,

• ü  Remove unwanted backups in the CPbackup
• ü  Clear the unwanted files for database revision control
• ü  Remove any hotfix or tgz file uploaded for installation
• ü  Remove any cpinfo or zdebug logs in the server.

This will be the maximum troubleshooting you could do as per technical documentations available.

But sometimes you will not see any difference in disk space even after clearing them. So what could be the solution here!!

Yes to solve this, first question I would ask you is,

Have you upgraded your firewall recently?

Most of them will reply to “Yes”

If yes then your job is easy. So to the location var/log/opt/cpsuite<olderversion number before upgrade>/fw1

When you check here we will have ton of logs. So clear those and we are good to go.

Now check with smartview monitor and you will have sufficient amount of space available in your checkpoint management server.