This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Log Disk is filling up

Hello I have a two SG330 in a HA scenario.
At 10/06/2014 I have began to receive emails from UTM with this topic: "Log Disk is filling up - please check. Current usage: 100 " on node 1
I have checked the the graphs on "Loggin and Reporting" system and I have noticed that since 09/30/2014 the free space on log disk was quickly reduced until 10/02/2014 when was zero, and it remains at the same state.

I have conected to SG330 by ssh and I have cheked the system file with command dh -h with this result:
Filesystem Size Used Avail Use_ Mounted on
/dev/sda7 83G 82G 0 100_ /var/log
I have updated the software version to last avaiable and reboot the both SG330 but it is not solve the problem.
Today HA Node 1 has began to have problems. It changes his state to SYNCING and in HA Log Live I see this:
2014:10:07-10:49:17 SOPHOS-1-1 repctld[14100]: [e] db_connect(2554): error while connecting to database: could not connect to server: No such file or directory
2014:10:07-10:49:17 SOPHOS-1-1 repctld[14100]: [c] local_connection(2500): cannot connect to local database: could not connect to server: No such file or directory
2014:10:07-10:49:17 SOPHOS-1-1 repctld[14100]: [e] do_monitor(1537): cannot get local database status

How can I solve this??

Thanks in advanced

Regards
Guille

This thread was automatically locked due to age.

0 BAlfson over 10 years ago

Hi, Guille, and welcome to the User BB!

Hopefully, Sophos Support already has helped you with this.

In 'Management >> High Availability', on the 'System Status' tab, does it appear that the Slave node has the same issue? If not, then you could force a failover to the other node.

In 'Logging & Reporting >> Log Settings', what is your configuration for deletion and thresholds?

In 'Logging & Reporting >> View Log Files', what are the three largest files and what are their sizes?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 AlanT_01 over 10 years ago

Hi Guile,

the errors indicate that there's some sort of database problem occurring on your system. The side effect, is that it's generating many errors which are filling up your logs, and disk space. To fix the issue, the database issue should first be addressed, and you may want to contact support to find out what is occurring and correct it.

The quick and dirty way to address this, would be to make a current backup and save it to your workstation, break your HA connection, factory reset one of your SGs, then restore your current backup onto that machine. Once that's restored, the system should be in a clean state, with no database errors occurring, and you can factory reset the second node, and re-connect HA.

Working with support will likely provide a more precise solution, but if you're just interested in getting everything back to proper order, then the above will most likely do it.
Cancel
Vote Up 0 Vote Down

Cancel
0 gresines over 10 years ago in reply to AlanT_01

Hello,

Thanks guys for the info, I have opened a support case, and I hope they can help me to solve this situation.

Hi Guile,

the errors indicate that there's some sort of database problem occurring on your system. The side effect, is that it's generating many errors which are filling up your logs, and disk space.

It is probabily the reason of Log Disk is filling up because in "Logging and Reportting" the large file I have, it´s about 400MB and I have a few files.

I have thought already to make a factory reset, but I think that it´s interesting that support crew can study the situation first in order to prevent further problems

Regards,
Guille
Cancel
Vote Up 0 Vote Down

Cancel

Log Disk is filling up

Submitted a Tech Support Case lately from the Support Portal?