New periodic alert: Configuration size 19MB is above 80% of the maximum recommended configuration size 23MB for the platform.

[idelconsulting]

Dear all,

since a couple of days I'm getting alerts like:

Configuration size 19MB is above 80% of the maximum recommended configuration size 23MB for the platform. Please consider removing unused configuration

I removed all old auto saved configs after upgrades, and the config size looks ok:
> show management-server last-committed config-size
392261 bytes

What seems to be strange is the size of the candidate configs;

> show management-server candidate config-size
20213190 bytes

Apparently there is no way to delete these, except may be TAC getting root access.

Did anyone else see this and found a solution?

Regards

   Andreas

[BPry]

@idelconsulting,

This isn't saved configurations that you may have on the device, it's regarding the actual size of the configuration file being utilized on the device. Assuming that you utilize Panorama, make sure you aren't pushing unused objects since that's a very quick way to run into this issue. You have to have a relatively large configuration to be at 19MB, and the quickest way to get there is having Panorama pushing unused objects.

[idelconsulting]

I'm not sing Panorama.

The firewall is locally managed.

And according to the CLI these are all candidate contigs, but no pending commit.

Regards,

  Andreas

[Max-Berberich]

Hi Andreas,

we're having the same issue with a vm platform (not panorama managed).

Disk space especially root partition is around 30% space left. 

I just opened a case with pan. 

The Supporter mentioned that a fix will be provided in 11.1.3.

For a workaround you could exclude the alert. From the logs setting > system, you can try to negate keywords. For example, "(severity eq critical) and not (description contains 'Configuration size')".

KR

Max

[idelconsulting]

Hi Max,

I'm running 11.1.3-h2 and the issue is not fixed yet.

Regards,

  Andreas

[EdmarFrancis]

Hello @Max-Berberich , hope you are doing well. Did TAC provide a PAN-ID for the issue?

[Max-Berberich]

Hi @EdmarFrancis unfortunately not.

TAC only mentioned that this is known internally but sadly was not published as a known Issue with an Issue ID.

KR