Hi,
We are getting "High unmanaged disk usage on /ngfw" alarms on a FTD 4100 and it seams like the issue are tons of log files
under the /ngfw//var/sf/detection_engines folder.
I saw there is a bug reported on this issue and I've already opened a TAC case, but I am curious if someone else experienced this issue and got a similar response from TAC about which files that safely could be removed.
The respond I got from TAC was to run the following commands in expert mode.
rm -rf (/ngfw/)/var/sf/detection_engines/<uuid>/instance-*/fileperfstats.log.*
rm -rf (/ngfw/)/var/sf/detection_engines/<uuid>/instance-*/ssl-certs-unified.log.*
rm -rf (/ngfw/)/var/sf/detection_engines/<uuid>/instance-*/ssl-nse-debug.log.*
rm -rf (/ngfw/)/var/sf/detection_engines/<uuid>/instance-*/ssl-stats-unified.log.* </uuid></uuid></uuid></uuid>
Thanks
/Jorgen