Automatic Device Log Cleanup - Juniper NETWORK AND SECURITY MANAGER 2010.2 - ADMINISTRATION GUIDE REV1 Administration Manual

Automatic Device Log Cleanup

Copyright © 2010, Juniper Networks, Inc.
keep all log entries, resulting in large numbers of log entries that the administrator might
not have time to review, but needs to store.
To manage log volume, you can use the NSM UI to both archive and purge logs.
NOTE: Excessive logging creates additional traffic on your network. It is recommended
that you balance your logging needs with the performance needs of your management
system.
You can also export your log records to other formats for use in other applications. For
details on how to forward logs, see "Forwarding Logs" on page 770.
In NSM, logs are gathered and stored by the Device Server. In a given deployment, the
Device Server can be deployed on the same machine as the GUI Server or on a separate
machine. When determining disk space requirements for NSM, you must consider a log
management strategy that optimizes the performance of your management system.
The
/usr/netscreen/DevSvr/var/devSvr.cfg
you can use to manage log disk space.
—If you configure this parameter, the Device Server triggers a
storageManager.alert
warning when the available disk space falls below the configured value. The default
value is 1500 MB. The user receives an e-mail alert about the low availability of free
disk space on the Device Server.
NOTE: Use the Server Manager node in the NSM UI to configure e-mail notification.
Refer to "Configuring Servers" on page 672 for more information.
storageManager.minimumFreeSpace
free disk space value. The default is 1000 MB. If the available disk space falls below
the configured value, the Device Server begins to purge logDb data starting from the
earliest date in the logs directory until the available disk space reaches the configured
value. However, if the free disk space is lower than the configured value of the
storageManager.Threshold
down automatically.
storageManager.threshold
disk space which if breached, causes the Device Server to automatically shut down.
The default value is 800 MB.
If the Device Server fails to restart because of a lack of sufficient free disk space, an
indicative error message appears in the console window advising you to either back up
your data, or create additional disk space in order to restart the server.
You can change the parameters for managing disk space on the Device Server by editing
the Device Server configuration file. For more information on managing disk space on
the Device Server, refer to the Network and Security Manager Installation Guide.
file contains log cleanup parameters that
— With this parameter you can configure a minimum
prior to the current day of log data, the Device Server shuts
—With this parameter, you can define a threshold for available
Chapter 18: Logging
767