On VM Firewalls, the root partition becomes full due to the large VM license files

On VM Firewalls, the root partition becomes full due to the large VM license files

4761
Created On 04/11/22 08:54 AM - Last Modified 08/21/24 20:12 PM


Symptom


  • On VM Series firewall with VM-Series Plugin 2.1.4, the root partition fills up.
  • System logs (show logs system) report the "cleaning filesystem" messages.
19:55 critical general general 0 Disk usage for / exceeds limit, 95 percent in use, cleaning filesystem
36:32 critical general general 0 Disk usage for / exceeds limit, 95 percent in use, cleaning filesystem
  • "show system disk-space" reports almost full disk space.

 



Environment


  • VM-Series Virtual Next-Generation Firewalls
  • PAN-OS 10.1.4
  • VM-Series Plugin 2.1.4


Cause


  • This issue is caused by the large size of "vm_license_response.log" and the corresponding "vm_license_response.log_backup.gz".
  • There files contain the results of signatures of license check and response by the curl command.


Resolution


  1. This issue is fixed under PLUG-10024 in the VM-Series Plugin 2.1.5.
  2. Upgrade of PAN-OS to 10.1.5 and VM Plugin to 2.1.5 will resolve the issue.
  3. As a workaround, delete the over-sized files using the command below. 
admin> delete debug-log mp-log file vm_license_response.log_backup.gz
successfully removed vm_license_response.log_backup.gz
  1. Check the disk space after those files are deleted.
admin> show system disk-space

Filesystem Size Used Avail Use% Mounted on
/dev/root 6.9G 5.0G 1.6G 77% /    <<<<<<
none 3.9G 92K 3.9G 1% /dev
/dev/sda5 16G 4.3G 11G 29% /opt/pancfg
/dev/sda6 7.9G 1.5G 6.0G 20% /opt/panrepo
tmpfs 3.3G 3.0G 313M 91% /dev/shm
cgroup_root 3.9G 0 3.9G 0% /cgroup
/dev/sda8 21G 11G 9.2G 54% /opt/panlogs

 



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oNZOCA2&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language