Description
This article explains how to troubleshoot HD usage from the partition.
Scope
FortiGate.
Solution
The total HD usage can be found by running the command 'diagnose sys logdisk usage'
diagnose sys logdisk usage
Run the following command:
fnsysctl df -h
Filesystem Size Used Available Use% Mounted on
none 7.1G 305.7M 6.8G 4% /tmp
none 7.1G 111.5M 7.0G 2% /dev/shm
none 7.1G 58.9M 7.1G 1% /dev/cmdb
/dev/sda1 231.9M 121.3M 97.7M 55% /data
/dev/sda2 1.6G 176.8M 1.3G 11% /data2
/dev/sdb1 29.4G 27.3G 577.0M 98% /var/log <- If Var/log/ is occupied more than 95%.
none 7.1G 58.9M 7.1G 1% /new_root/eap_proxy/dev/cmdb
/dev/sda1 231.9M 121.3M 97.7M 55% /new_root/eap_proxy/etc/cert/ca
/dev/sda1 231.9M 121.3M 97.7M 55% /new_root/eap_proxy_worker/etc/cert/ca
fnsysctl ls -l /var/log/log/root/
Check which logs are occupied under /var/log/. Some logs are old logs and if Archives are occupied, the Disk utilization will rise to 99% Before purging the log data, confirm a backup has been made via the TFTP server. If FortiAnalyzer is communicating with FortiGate, there is no need to take a backup:
To purge the log-data, run the following command and enter the admin username and password when prompted.
diagnose sys logdisk purge-log-data
After finishing the purge:
Verify the disk size:
diagnose sys logdisk usage
fnsysctl df -h
fnsysctl ls -l /var/log/log/root/
The disk space will reduced.
Note:
Super Admin privilege is required to run 'fnsysctl' command. Otherwise, FortiGate will return an error as mentioned in this article: Technical Tip: fnsysctl command returns Unknown action 0
Related articles:
Troubleshooting Tip: How to clear short of flash space in FortiGate Disk partition
Technical Tip: Hard disk utilization by the FortiGate
