Storage issue unable to clear logs

cjbujold

need guidance on how to clear logs. We are using a Netgate 5100 and the storage is indicating warning status.

When we look at the storage we see the following:

This seems to indicate that we may have large log files. When go the log setting to decrease or clear the existing logs we see that the minimum " log rotation size Bytes" is 500Kib yet the system will not allow us to reduce the 100,000Kib to something smaller. We are also using PFBlockerNG and are trying to clear those logs also. How do we do this? If we try to reset/clear the log files we get this crash message.

Thanks

stephenw10

Check in /var to see if it's actually the logs and in /var/log to see if it's one specific log. Though if you've got the logs set to 100M each that will be quite a lot.

What error do you see when you set the logs to 500K? Did you also reset the log data?

Steve

Gertjan

@cjbujold

A "5100" and less then 8 Gbytes of disk space ? Isn't that not a typo ?
My 4100 goes well over 100 Gbytes .....

edit : maybe you can clean up a bit here : System > Boot Environments

That close to nothing already.
Having some history in your log files, about 20 of them, is important as these will tell you "what happened" in case of an issue.

pfBlockerng :

These are the default values :

Note that they are expressed in "lines" and not in "Bytes".

Right now, for me, that's :

[23.05.1-RELEASE][root@pfSense.bhfl.net]/root: ls -al /var/unbound/var/log/pfblockerng
total 16838
drwxr-xr-x  2 unbound  unbound        11 Sep 22 00:15 .
drwxr-xr-x  3 root     unbound         3 Jan 18  2023 ..
-rw-------  1 unbound  unbound  23284618 Sep 22 15:33 dns_reply.log
-rw-------  1 unbound  unbound   2708196 Sep 22 15:25 dnsbl.log
-rw-------  1 root     wheel        7752 Sep 22 00:15 dnsbl_parsed_error.log
-rw-------  1 root     wheel      163035 Sep 22 07:01 extras.log
-rw-------  1 root     wheel     3038307 Sep 22 00:15 ip_block.log
-rw-r--r--  1 root     unbound       121 Sep 22 07:00 maxmind_ver
-rw-------  1 root     wheel    20030893 Sep 22 00:15 pfblockerng.log
-rw-r--r--  1 unbound  unbound         0 Feb  8  2023 py_error.log
-rw-------  1 unbound  unbound  23387691 Sep 22 15:33 unified.log

About :

This is pfSense (PHP) telling you :
Stop using this :

use the console or (better) SSH access. As soon as SSH is up, use also, for example, WinSCP, you'll love it.

What probably happened : you tried to look or open a file that was way to big to be shown by "PHP". Logs files are always 'to big'.

cjbujold

Thanks for all the great suggestions. Found that the log issue was with PFblockerNG with log files being huge, reset the logs and we are now at a normal level .

Thanks
CJB