Cisco IronPort S170 Access Logs are filling up the HDD
We have a Cisco IronPort S170.
The access logs have filled the HDD to 91%
The device is taking a serious performance hit.
It now takes 5 minutes per click if I'm lucky.
I have accessed the device via FTP and am about to copy off all of our AccessLogs.
Once this is completed is there a way to wipe only the accesslogs from the device?
Via FTP the transactions seemed to be read only
I was looking through the CLI, but wasn't sure which command to use.
Thanks,
Brian
When you FTP to the device, and CD to the appropriate directory path - are you not able to mdel the files? Are you accessing the appliance via FTP as an admin level user?
-Robert
Similar Messages
-
Logs are filling up disk space
Dear all
i am facing a problem in my database
the database is in archive log mode and continuous archiving of log is filling up the disk space
please let me know what should i do so that at the end of activity there should be no complaints of logs filling up
i wil ensure the big disk space
please let me know what kind of administration i have to do with this issue ...hello Sagar
when you use RMAN for backup you can set RETENTION POLICY for window of day or redundancy for example
RMAN> CONFIGURE RETENTION POLICY TO RECOVERY WINDOW OF 3 DAYS;
or
RMAN> CONFIGURE RETENTION POLICY TO REDUNDANCY 3;
and when you backup use "BACKUP ... PLUS ARCHIVELOG" for example
BACKUP DEVICE TYPE sbt
DATABASE PLUS ARCHIVELOG;
it cause that RMAN when backup your database , backup your archived logs too ;
and about that two first CONFIGURE command
first command cause backupfiles and archived log files that backuped up before than 3 days signed obsolete in V$BACKUP_FILES view
(you can query the V$BACKUP_FILES view and check the OBSOLETE column)
second command cause backupfiles and archived log files that backuped up 3 times signed obsolete in V$BACKUP_FILES view
and if you use "DELETE OBSOLETE ..." command in RMAN it delete obsolete files
and your archived logs that backued up and are obsolete will be delete
AND you can use DBMS_SCHEDULER for synchronize this routine
Message was edited by: khosravi
khosravi -
We lost access to are computers in the last two months and we want to know how to deauthorize two computers from the ituns account can you please help me please?
If you don't have access to the computers to manually deauthorize them (they were sold, stolen, etc), then you have to log into your account, deauthorize all computers, and then re-authorize the machine(s) that you want to have access. This page explains how.
-
I am trying to install Lightroom and I am OK until it asks for a serial number. I purchased Lightroom from B&H and the have entered the seal number on the the B&H invoice. Nothing happens, not all the entry boxes are filled with the serial number that was provided by B&H. I looked for a serial number on and in the box it came in, nada. Need a bit of help here, what can I do?
RJ@Try to connect on Live chat one more time.
Still not connected , better to contact Adobe Phone Support
Click on Phone option and check once :
Contact Customer Care -
How the Payload Message and Logs are stored in the B1i Database Table: BZSTDOC
I would appreciate it if someone could provide any documentation regarding B1i database further maintenance.
for example:
I want to know how the payload message and logs are stored in the table BZSTDOC, and how can we retrieve the payload message directly from the column DOCDATA.
As described in the B1iSNGuide05 3.2 LogGarbageCollection:
to avoid the overload of the B1i Database, I set the Backup Buffer to 90 days : so this means Message Logs from the last 90 days will always be available, but is there some way we can save those old messages to a disk so that I can retrieve the payload message anytime?
in addition, let’s assume the worst, the B1iSN server or the B1i database damaged, Can we just simply restore the B1i database from a latest backup DB then it can work automatically after the B1iSN server is up and running again?
BR/JimDear SAP,
Two weeks passed, I still haven't received any feedback from you guys.
Could you please have a look at my question?
How is this Question going? Is it Untouched/Solving/Reassigned ? -
LWAPP access points are unregistering from the controller
Our wireless controller network designed with one 4402 controller and 30 LWAPP 1000 series access points.
all lwapp access points are suddenly unregistering from the controller and registering with controller after few minutes. It was happen randomly 2 to 4 times in a day.
I am adding the attachment of log file please help me anyone know identified this problem.
Thanking you,
Regards,
Ranga Kishore
9959344436Hi,
What's the specific model of your 4402? How many access points do your controller support?
Can you also check if the uplink or distribution ports on your WLC goes up and down. Thanks.
Regards -
How archive infostructures are filled when the delete program runs(sd_cond)
I could not find a suitable forum for this, hence posting it here. I need to know how the ZARIX tables get filled in SAP Archiving. As far as I know, they are filled automaticlaly when the delete job runs, but I could not find any code in SD_COND_ARCH_DELETE program.
My issue is that my delete program did not fill one of the infostructures which was active and this infostructure corresponds to the zarix table. On the other hand, this infostructure got filled manually(verified in zarix also).
Wondering how this could have happened. Can this be because multiple delete jobs are running creating various sessions. This is mainly with reference to the SD_COND archive object.Hi,
There is a separate program to fill infostructures as when you fill them manually (Transaction SARJ, Environment -> Fill Structure) a new job is triggered. Have a look at the job that ran when you filled your infostructure manually and analyse the program that ran.
There should not be any problem in filling the infostructures due to several archiving sessions running at the same time. If you face the same issue again, see if any of the archiving jobs (write, store, delete) failed for any reason. If all the jobs finished successfully but an infostructure didn't get filled then have a look for any OSS note related to this issue. If you can't find anything, raise an SAP message as the infostructures have to get filled automatically as otherwise there will be no access to the archived data.
Hope this helps. -
I have a form currently open and users are giving me feedback to enhance the process. I was asked if there was anyway for the user (the person filling out the form) to preview the form before submission to check for typos and such. I have looked around and I don't see anything that discusses this ( I could have missed it). Can anyone let me know if this is possible or not?
Thanks,
AshleyAshley,
We don't have an explicit review step in the submission process, however it is possible for form fillers to page/scroll back through the form to look at the entries they have made.
Andrew Yarborough -
Archived logs are 5MBish when the ORL is 10mb !
version: 10.2.0.4/RHEL 5.4
In our DB the Online Redo Logs are sized 10mb
SQL> select group#, bytes/1024/1024 from v$log;
GROUP# BYTES/1024/1024
1 10
2 10
3 10But the archived redo logs are of size around 5mb.As you can see from the file sizes below, manual log switch/archiving is not happening.
Below are the archived redo log file in the location configured for LOG_ARCHIVE_DEST_1
-rw-r----- 1 oracle dba 5267456 May 7 22:00 kemsuat_1_655792404_95866.arc
-rw-r----- 1 oracle dba 5241856 May 7 22:00 kemsuat_1_655792404_95867.arc
-rw-r----- 1 oracle dba 5241856 May 7 22:00 kemsuat_1_655792404_95868.arc
-rw-r----- 1 oracle dba 6000640 May 7 22:00 kemsuat_1_655792404_95869.arc
-rw-r----- 1 oracle dba 5241856 May 7 22:00 kemsuat_1_655792404_95870.arc
-rw-r----- 1 oracle dba 5241856 May 7 22:01 kemsuat_1_655792404_95871.arc
-rw-r----- 1 oracle dba 5241856 May 7 22:01 kemsuat_1_655792404_95872.arc
-rw-r----- 1 oracle dba 6201344 May 7 22:23 kemsuat_1_655792404_95873.arc
-rw-r----- 1 oracle dba 5241856 May 7 23:13 kemsuat_1_655792404_95875.arc
-rw-r----- 1 oracle dba 5241856 May 7 23:13 kemsuat_1_655792404_95874.arc
-rw-r----- 1 oracle dba 5241856 May 7 23:13 kemsuat_1_655792404_95876.arc
-rw-r----- 1 oracle dba 5241856 May 7 23:13 kemsuat_1_655792404_95877.arc
-rw-r----- 1 oracle dba 5241856 May 7 23:13 kemsuat_1_655792404_95878.arc
-rw-r----- 1 oracle dba 5241856 May 7 23:13 kemsuat_1_655792404_95879.arc
-rw-r----- 1 oracle dba 8305152 May 7 23:13 kemsuat_1_655792404_95880.arc
-rw-r----- 1 oracle dba 5241856 May 7 23:13 kemsuat_1_655792404_95881.arc
-rw-r----- 1 oracle dba 5294592 May 7 23:13 kemsuat_1_655792404_95882.arc
-rw-r----- 1 oracle dba 7031296 May 7 23:14 kemsuat_1_655792404_95883.arc
-rw-r----- 1 oracle dba 5241856 May 7 23:14 kemsuat_1_655792404_95884.arc
-rw-r----- 1 oracle dba 5236736 May 7 23:45 kemsuat_1_655792404_95885.arc
-rw-r----- 1 oracle dba 5259264 May 8 01:15 kemsuat_1_655792404_95886.arc
-rw-r----- 1 oracle dba 5241856 May 8 02:50 kemsuat_1_655792404_95887.arc
-rw-r----- 1 oracle dba 5238784 May 8 04:30 kemsuat_1_655792404_95888.arc
-rw-r----- 1 oracle dba 5298176 May 8 06:06 kemsuat_1_655792404_95889.arc
-rw-r----- 1 oracle dba 5241856 May 8 07:30 kemsuat_1_655792404_95890.arc
-rw-r----- 1 oracle dba 5240320 May 8 09:00 kemsuat_1_655792404_95891.arc
-rw-r----- 1 oracle dba 5241856 May 8 09:44 kemsuat_1_655792404_95892.arc
-rw-r----- 1 oracle dba 5238784 May 8 10:15 kemsuat_1_655792404_95893.arc
-rw-r----- 1 oracle dba 5241856 May 8 10:37 kemsuat_1_655792404_95894.arc
-rw-r----- 1 oracle dba 5241856 May 8 11:06 kemsuat_1_655792404_95895.arc
-rw-r----- 1 oracle dba 5241856 May 8 11:37 kemsuat_1_655792404_95896.arc
-rw-r----- 1 oracle dba 5241856 May 8 12:15 kemsuat_1_655792404_95897.arc
-rw-r----- 1 oracle dba 5241856 May 8 12:52 kemsuat_1_655792404_95898.arc
-rw-r----- 1 oracle dba 5241856 May 8 13:22 kemsuat_1_655792404_95899.arc
-rw-r----- 1 oracle dba 5241344 May 8 14:01 kemsuat_1_655792404_95900.arcAny idea why is this ?LOG_BUFFER is only 15 mb in this DB.Could this be the cause as suggested in the ML document ?
SQL> show parameter log_buff
NAME TYPE VALUE
log_buffer integer 15638720
SQL > select 15638720/1024/1024 from dual;
15638720/1024/1024
14.9142456 But LOG_BUFFER parameter is automatically set by oracle after some internal calculation. Right ? Something went wrong with that calculation ? -
Can't figure out why all of my editable text fields are filling with the same text.
I running Adobe Reader 7. I was given a PDF file that has three seperate text fields. I typed test into the first field, and the other two fields have filled with the exact same text. What is up with that? I've enclosed the file for your enjoyment.
The fields has the same name.
-
IronPort S170 WSA - Max file download size
Hello,
we're using an IronPort S170 WSA. Downloading big .iso (maybe other files, too) files fails. As far as I can find out, files of 2300MB or less can be downloaded, files of 3300MB or bigger fail to download (I haven't been able to try files with sizes between 2300MB - 3300MB). Using the same client without using the IronPort as a proxy, the download of the big files succeed.
The web page error message indicates:
Blocked by [companyname] Web Proxy
Category = Allowed%20URL%208080
WBRS Value = -
DVS Verdict = -
DVS Threat = -
So, I assume there is a setting in the IronPort that prevents the download of files exceeding a size limit. But I cannot find any config item that controls this. Does anyone know where this setting can be found?
Description: Cisco IronPort S170
Product: Cisco IronPort S170 Web Security Appliance
Model: S170
Version: 7.7.0-500Do you get an instant block for large files? Or does it try to download for a while, and then fails?
If it is an instant block, it should be under Web Security Manager > Access Policies. Look in the object types section.
If you are downloading for about an hour and the downloads stop, it may be authentication related.
-Vance -
Occasionally we get the message that logging can’t keep up but within seconds to a minute we get a second message stating it has “caught up”.
The Critical message is:
Reporting Client: The reporting system is unable to maintain the rate of data being generated. Any new data generated will be lost.
Product: Cisco IronPort S170 Web Security Appliance
Model: S170
Version: 7.7.0-757
Serial Number: 503DE59CF1E5-FTX1602M08G
Timestamp: 23 Apr 2015 13:21:31 -0400
The Info message is:
Reporting Client: The reporting system is now able to handle new data.
Product: Cisco IronPort S170 Web Security Appliance
Model: S170
Version: 7.7.0-757
Serial Number: 503DE59CF1E5-FTX1602M08G
Timestamp: 23 Apr 2015 13:21:35 -0400
Cisco recommends upgrading appliance but funds are tight! This just started happening. Any clues for resolution??Duplicate post.
Go HERE. -
Ironport S170 and Microsoft RADIUS
I'm trying to setup management logins for the IronPort S170 using RADIUS. I have the Windows server configured and the server information is in the S170, but I'm having trouble with the Group Mapping. Under the RADIUS Class Attribute, what is an example of something that would go there? Is it an AD group? If not, is it some attribute number that I need to configure on the AD user object? If so, where? TAC has no idea how to do this.
This error occurs when the user’s account is not stored in reversible encryption.
CHAP requires that the secret be available in plaintext form. CHAP cannot use irreversibly encrypted password databases that are commonly available. If the RADIUS server does not have access to the plaintext password, it cannot perform the one-way hash to verify the user and the authentication will fail. By default, Microsoft Active Directory does not store user accounts with reversible encryption.
Reversible encryption is a user class attribute and is not enabled by default in the Active Directory. You must enable this setting manually on each account or through Group Policy Objects when dealing with multiple users.
~BR
Jatin Katyal
**Do rate helpful posts** -
Transaction log and access log
The transaction log (TransactionLogFilePrefix) and the access log are stored
relative to the directory where the server is started rather than where it
resides as with the rest of the log files. Why is this?
Eg.
I start the server with a batch file contained in
projects\bat
My server is in
projects\server\config\myDomain
When I start the server the access and transaction logs end up in
projects\bat
while all the rest of the log files (such as the domain and server log) end
up in
projects\server
My batch file that starts the server looks like this
"%JAVA_HOME%\bin\java" -hotspot -ms64m -mx64m -classpath %CLASSPATH%
"-Dbea.home=e:\bea"
"-Djava.security.policy==i:\projects\server\config\myDomain\weblogic.policy"
"-Dweblogic.Domain=myDomain" "-Dweblogic.Name=adminServer"
"-Dweblogic.RootDirectory=i:/projects/server"
"-Dweblogic.management.password=weblogic" weblogic.Server
Thanks for help on this,
MylesThe same case with me, I sent email to apple support, but got not reply.
The apple status page indicated that every thing is fine now, what a joke.
Many devs are in this situation too, I guess we could do nothing but waiting for their system to come up. -
Custom ELF Displays ' - ' in Extended access log
I am trying to capture some pretty basic custom fields in the extended access log.
I have created the appropriate class files and formatted the access.log correctly.
I know this because when I run Web Logic 6.1 on my windows desktop the Extended
Access Logs displays the values correctly.
When I move the JAR file containing the ELF Classes to a SunOS server with Web
Logic 6.1 the Extended Access Log contains only '-' for the custom fields. I ran
some JSP files on the sun server to pull the values from the Request to make sure
they were not null. They display correctly on the JSP so I know the values exsist
within the request.
The mystery is why won't they display in the access.log on the sun machine? Has
anyone else experinced this? Are there any settings I should be checking for on
the sun servers console?
Facts:
* The classes ae correct becuase they display correctly on the windows machine
* The request on the sun server contains my ELF values becuase I can print them
on a jsp page
* The JAR file which contains the ELF classes is sitting outside of the application
and loads in the classpath successfully.(I know this because I had it wrong and
couldn't start the server)I am trying to capture some pretty basic custom fields in the extended access log.
I have created the appropriate class files and formatted the access.log correctly.
I know this because when I run Web Logic 6.1 on my windows desktop the Extended
Access Logs displays the values correctly.
When I move the JAR file containing the ELF Classes to a SunOS server with Web
Logic 6.1 the Extended Access Log contains only '-' for the custom fields. I ran
some JSP files on the sun server to pull the values from the Request to make sure
they were not null. They display correctly on the JSP so I know the values exsist
within the request.
The mystery is why won't they display in the access.log on the sun machine? Has
anyone else experinced this? Are there any settings I should be checking for on
the sun servers console?
Facts:
* The classes ae correct becuase they display correctly on the windows machine
* The request on the sun server contains my ELF values becuase I can print them
on a jsp page
* The JAR file which contains the ELF classes is sitting outside of the application
and loads in the classpath successfully.(I know this because I had it wrong and
couldn't start the server)
Maybe you are looking for
-
My iphone 4 is broken can I get a replacement
Hello Apple , My iPhone 4 is really in bad shape can I get a replacement even though I haven't paid my bill <Email Edited by Host>
-
How can I remove a mail account that does not show up in Internet Accounts?
I have a Mail account that I cannot remove because it does not show up in System Preferences > Internet Accounts. How can I remove this account permanently? Here is the account in Mail: Here is what I get when I try to remove it: Here is what shows
-
Apple TV - TV program closes when using Macbook?
I was watching a TV program on my Apple TV 2 yesterday. The program was purchased from iTunes and was/is available on iCloud. Therefore I was watching it straight from iCloud over my home wifi. However about half way through I turned my Macbook on an
-
Is it possible to print separate pages on the same sheet in preview. I would like to split a set of class power points to display Page 1 and 2 on the first page, page 3 and 4 on the second page etc. Thanks in advance!
-
Hi experts, When I do settlement from AUC to GL Accounts, system promts error message, saying that budget exceeded for that particular Commt. item & Fund Centre. Does anyone know how to block budget check during settlement from AUC to GL Accounts. T