Submit a ticketCall us

WebinarWebinar: A checklist for planning your Network Performance Monitor (NPM) upgrade

Are you ready for your next upgrade? To help you plan smoothly, join this webcast to learn more about, SolarWinds® Orion® Installer, SolarWinds Upgrade Advisor, Upgrades Guides, Training Videos, and other resources available. We’ll share key upgrade planning considerations, lessons learned from customers with practical advice from SolarWinds Product Experts. We’ll also give practical tips to identify the estimated time needed and resources, how to prepare the business and IT staff for changes, ways to plan for required system changes, and more.

Register now.

Home > Success Center > Log & Event Manager (LEM) > LEM - Knowledgebase Articles > Unable to compress large Syslog data files

Unable to compress large Syslog data files

Created by David Clark, last modified by Brian.Kiely on Jan 11, 2018

Views: 1,187 Votes: 1 Revisions: 11

Overview

The log size is over 7 GB and Linux is having an issue compressing it.

Environment

All LEM versions

Cause 

  • ASA, for example, can generate up to 6 GB of syslog an hour if info severity is enabled.
  • In 24 hours that log can easily exceed 8 GB.
  • The Log file is exceeding 8 GB and LEM is set to compress compresses the log files daily.
  • Linux cannot compress files over 8 GB.

Resolution

  1. Change the default values on the LEM by going to the CMC shell in Vsphere or putty.
  2. In the command prompt, enter the command appliance.
  3. Enter the command setlogrotate and change to hourly. This allows LEM to compress a file each hour instead of daily.
    Note: If your Logs/Data partition is full or a particular Syslog file is large, contact SolarWinds Support to assist in this process.
     
Last modified

Tags

Classifications

Public