Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Storage issue unable to clear logs

    Scheduled Pinned Locked Moved General pfSense Questions
    4 Posts 3 Posters 505 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cjbujold
      last edited by

      need guidance on how to clear logs. We are using a Netgate 5100 and the storage is indicating warning status.
      storage.jpg

      When we look at the storage we see the following: StorageDetails.jpg

      This seems to indicate that we may have large log files. When go the log setting to decrease or clear the existing logs we see that the minimum " log rotation size Bytes" is 500Kib yet the system will not allow us to reduce the 100,000Kib to something smaller. We are also using PFBlockerNG and are trying to clear those logs also. How do we do this? If we try to reset/clear the log files we get this crash message.

      2crash.jpg

      Thanks

      GertjanG 1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Check in /var to see if it's actually the logs and in /var/log to see if it's one specific log. Though if you've got the logs set to 100M each that will be quite a lot.

        What error do you see when you set the logs to 500K? Did you also reset the log data?

        Steve

        1 Reply Last reply Reply Quote 0
        • GertjanG
          Gertjan @cjbujold
          last edited by

          @cjbujold

          A "5100" and less then 8 Gbytes of disk space ? Isn't that not a typo ?
          My 4100 goes well over 100 Gbytes .....

          edit : maybe you can clean up a bit here : System > Boot Environments

          792f91b4-8d07-420a-9e19-39745d4316fa-image.png

          That close to nothing already.
          Having some history in your log files, about 20 of them, is important as these will tell you "what happened" in case of an issue.

          pfBlockerng :

          These are the default values :

          96ffe6ad-9fc0-4cb9-91e8-731ca65ec299-image.png

          Note that they are expressed in "lines" and not in "Bytes".

          Right now, for me, that's :

          [23.05.1-RELEASE][root@pfSense.bhfl.net]/root: ls -al /var/unbound/var/log/pfblockerng
          total 16838
          drwxr-xr-x  2 unbound  unbound        11 Sep 22 00:15 .
          drwxr-xr-x  3 root     unbound         3 Jan 18  2023 ..
          -rw-------  1 unbound  unbound  23284618 Sep 22 15:33 dns_reply.log
          -rw-------  1 unbound  unbound   2708196 Sep 22 15:25 dnsbl.log
          -rw-------  1 root     wheel        7752 Sep 22 00:15 dnsbl_parsed_error.log
          -rw-------  1 root     wheel      163035 Sep 22 07:01 extras.log
          -rw-------  1 root     wheel     3038307 Sep 22 00:15 ip_block.log
          -rw-r--r--  1 root     unbound       121 Sep 22 07:00 maxmind_ver
          -rw-------  1 root     wheel    20030893 Sep 22 00:15 pfblockerng.log
          -rw-r--r--  1 unbound  unbound         0 Feb  8  2023 py_error.log
          -rw-------  1 unbound  unbound  23387691 Sep 22 15:33 unified.log
          

          About :

          dd526d3c-d2cf-4db6-9e2e-8c34ed85475c-image.png

          This is pfSense (PHP) telling you :
          Stop using this :

          e7948af4-416b-427a-b704-5f19de01ea37-image.png

          use the console or (better) SSH access. As soon as SSH is up, use also, for example, WinSCP, you'll love it.

          What probably happened : you tried to look or open a file that was way to big to be shown by "PHP". Logs files are always 'to big'.

          No "help me" PM's please. Use the forum, the community will thank you.
          Edit : and where are the logs ??

          1 Reply Last reply Reply Quote 0
          • C
            cjbujold
            last edited by

            Thanks for all the great suggestions. Found that the log issue was with PFblockerNG with log files being huge, reset the logs and we are now at a normal level .

            Thanks
            CJB

            1 Reply Last reply Reply Quote 1
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.