- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
07-20-2024 08:49 AM
Dear all,
since a couple of days I'm getting alerts like:
Configuration size 19MB is above 80% of the maximum recommended configuration size 23MB for the platform. Please consider removing unused configuration
I removed all old auto saved configs after upgrades, and the config size looks ok:
> show management-server last-committed config-size
392261 bytes
What seems to be strange is the size of the candidate configs;
> show management-server candidate config-size
20213190 bytes
Apparently there is no way to delete these, except may be TAC getting root access.
Did anyone else see this and found a solution?
Regards
Andreas
07-23-2024 03:01 PM
This isn't saved configurations that you may have on the device, it's regarding the actual size of the configuration file being utilized on the device. Assuming that you utilize Panorama, make sure you aren't pushing unused objects since that's a very quick way to run into this issue. You have to have a relatively large configuration to be at 19MB, and the quickest way to get there is having Panorama pushing unused objects.
07-24-2024 04:57 AM
I'm not sing Panorama.
The firewall is locally managed.
And according to the CLI these are all candidate contigs, but no pending commit.
Regards,
Andreas
07-25-2024 01:24 AM
Hi Andreas,
we're having the same issue with a vm platform (not panorama managed).
Disk space especially root partition is around 30% space left.
I just opened a case with pan.
The Supporter mentioned that a fix will be provided in 11.1.3.
For a workaround you could exclude the alert. From the logs setting > system, you can try to negate keywords. For example, "(severity eq critical) and not (description contains 'Configuration size')".
KR
Max
07-25-2024 03:33 AM
Hi Max,
I'm running 11.1.3-h2 and the issue is not fixed yet.
Regards,
Andreas
08-11-2024 09:55 PM
Hello @M-WBERB , hope you are doing well. Did TAC provide a PAN-ID for the issue?
08-19-2024 12:39 AM
Hi @EdmarFrancis unfortunately not.
TAC only mentioned that this is known internally but sadly was not published as a known Issue with an Issue ID.
KR
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!