topic Re: Disk-Space issue and role in General Topics

Disk-Space issue and role

Kang_Han — Tue, 31 Oct 2017 01:18:21 GMT

I have found that disk-space is getting higher which is mounted on /.

I just wonder the role of each filesystem.

I know /dev/md5 is mounted on /opt/pancfg, /dev/mp6/ is on /opt/panrepo and so on.

What is the role of / and what kind of files are there, appropraite use rate and how can i reduce the use rate?

Re: Disk-Space issue and role

wrainwater — Tue, 31 Oct 2017 20:19:36 GMT

I'd like to know the answer to this as well. just dealt with a similar issue not too long ago. Although my problem was with the main partition md2. We were sitting between 96-98%. With the help of support I was given commands that help brought it down to around 89%.

As far as answering what those partitions are this article may answer your question (depending on the PA model you are using.)

Go straight to page 8 and read on down. Mine is in the 5000 series so thats the only documentation I have.

5060 Architecture

Re: Disk-Space issue and role

Kang_Han — Tue, 31 Oct 2017 05:17:27 GMT

Thank you for your reply. Could you tell me which command you used that help it down?

This is PA-5020. I can't find it in your document.

Thanks

Re: Disk-Space issue and role

reaper — Tue, 31 Oct 2017 08:25:52 GMT

the / partition holds the operating system, core files and some native log files

it is normal that there's only a few 100mb free since the largest part is taken up by the PAN-OS

if you're in the decimals, you should investigate if there may have been core files because a process crashed

reaper@myNGFW> show system files

/var/cores/:
total 4.0K
drwxr-xr-x 2 root root 4.0K Sep  1 11:09 crashinfo

/var/cores/crashinfo:
total 0

/opt/panlogs/cores/:
total 0

/opt/dpfs/var/cores/:
total 4.0K
drwxr-xr-x 2 root root 4.0K Sep  1 11:10 crashinfo

/opt/dpfs/var/cores/crashinfo:
total 0

Re: Disk-Space issue and role

AnalysisMan — Tue, 31 Oct 2017 09:27:05 GMT

The PAN-OS will clean up the filesystem automatically, when the / exceeds at 95% with the following message.

"Disk usage for / exceeds limit, 95 percent in use, cleaning filesystem"

However, the firewall will fill up the disk again and this is very annoying, especially on smaller platforms with limited space. The root / partition disk space can be reduced by these commands:

delete debug-log mp-log file *.1

delete debug-log mp-log file *.2

delete debug-log mp-log file *.3

delete debug-log mp-log file *.old

Re: Disk-Space issue and role

wrainwater — Tue, 31 Oct 2017 12:49:44 GMT

Looks like your question was answered but i'll post what I was sent anyway.

To clear space please enter the below commands:

(active)> delete debug-log mp-log file *.old

(active)> delete debug-log mp-log file *.log.4

(active)> delete debug-log mp-log file *.log.3

(active)> delete debug-log mp-log file *.log.2

(active)> delete debug-log mp-log file *.log.1

(active)> delete debug-log dp0-log file *.old

(active)> delete debug-log dp0-log file *.log.4

(active)> delete debug-log dp0-log file *.log.3

(active)> delete debug-log dp0-log file *.log.2

(active)> delete debug-log dp0-log file *.log.1

(active)> delete debug-log dp1-log file *.old

(active)> delete debug-log dp1-log file *.log.4

(active)> delete debug-log dp1-log file *.log.3

(active)> delete debug-log dp1-log file *.log.2

(active)> delete debug-log dp1-log file *.log.1

(active)> delete debug-log dp2-log file *.old

(active)> delete debug-log dp2-log file *.log.4

(active)> delete debug-log dp2-log file *.log.3

(active)> delete debug-log dp2-log file *.log.2

(active)> delete debug-log dp2-log file *.log.1

After running these commands it chopped my main partition down from 96% to 89%.

Re: Disk-Space issue and role

Prakhar — Tue, 09 Oct 2018 00:05:19 GMT

I am facing this issue as PAN admin from last 3 years on PA 5050 boxes. Its frustrating to manually delete these old files from cp/dp/mp everytime this issue happens. Is PAN working to automate this process ? I have seen even after 95 % usage the disk space is not cleaned up until I manually delete old files.