On VM Firewalls, the root partition becomes full due to the large VM license files
4761
Created On 04/11/22 08:54 AM - Last Modified 08/21/24 20:12 PM
Symptom
- On VM Series firewall with VM-Series Plugin 2.1.4, the root partition fills up.
- System logs (show logs system) report the "cleaning filesystem" messages.
19:55 critical general general 0 Disk usage for / exceeds limit, 95 percent in use, cleaning filesystem
36:32 critical general general 0 Disk usage for / exceeds limit, 95 percent in use, cleaning filesystem
-
"show system disk-space" reports almost full disk space.
Environment
- VM-Series Virtual Next-Generation Firewalls
- PAN-OS 10.1.4
- VM-Series Plugin 2.1.4
Cause
- This issue is caused by the large size of "vm_license_response.log" and the corresponding "vm_license_response.log_backup.gz".
- There files contain the results of signatures of license check and response by the curl command.
Resolution
- This issue is fixed under PLUG-10024 in the VM-Series Plugin 2.1.5.
- Upgrade of PAN-OS to 10.1.5 and VM Plugin to 2.1.5 will resolve the issue.
- As a workaround, delete the over-sized files using the command below.
admin> delete debug-log mp-log file vm_license_response.log_backup.gz
successfully removed vm_license_response.log_backup.gz
- Check the disk space after those files are deleted.
admin> show system disk-space
Filesystem Size Used Avail Use% Mounted on
/dev/root 6.9G 5.0G 1.6G 77% / <<<<<<
none 3.9G 92K 3.9G 1% /dev
/dev/sda5 16G 4.3G 11G 29% /opt/pancfg
/dev/sda6 7.9G 1.5G 6.0G 20% /opt/panrepo
tmpfs 3.3G 3.0G 313M 91% /dev/shm
cgroup_root 3.9G 0 3.9G 0% /cgroup
/dev/sda8 21G 11G 9.2G 54% /opt/panlogs