cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1099
Views
0
Helpful
0
Replies

High unmanaged disk usage on /ngfw alarms - Which files is safe to remove?

Chess Norris
Level 4
Level 4

Hi, 

 

We are getting "High unmanaged disk usage on /ngfw" alarms on a FTD 4100 and it seams like the issue are tons of log files

under the /ngfw//var/sf/detection_engines folder. 

I saw there is a bug reported on this issue and I've already opened a TAC case, but I am curious if someone else experienced this issue and got a similar response from TAC about which files that safely could be removed.

 

The respond I got from TAC was to run the following commands in expert mode.

 

rm -rf (/ngfw/)/var/sf/detection_engines/<uuid>/instance-*/fileperfstats.log.*
rm -rf (/ngfw/)/var/sf/detection_engines/<uuid>/instance-*/ssl-certs-unified.log.*
rm -rf (/ngfw/)/var/sf/detection_engines/<uuid>/instance-*/ssl-nse-debug.log.*
rm -rf (/ngfw/)/var/sf/detection_engines/<uuid>/instance-*/ssl-stats-unified.log.* </uuid></uuid></uuid></uuid>

 

Thanks

/Jorgen

 

 

 

 

0 Replies 0
Review Cisco Networking products for a $25 gift card