Scribd
Upload
74 views

Field Notice: FN - 70441 - Firepower Software - Mysql-Server - Err Log File Might Consume Excessive Disk Space - Workaround Provided - Cisco

Uploaded by

DavidPerez
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
74 views

Field Notice: FN - 70441 - Firepower Software - Mysql-Server - Err Log File Might Consume Excessive Disk Space - Workaround Provided - Cisco

Uploaded by

DavidPerez
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 3

Field Notice: FN - 70441 - Firepower Software - mysql-

server.err Log File Might Consume Excessive Disk Space -


Workaround Provided

Updated: September 3, 2019 Document ID: FN70441

Notice

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF
GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF
THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT
YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT
ANY TIME.

Revision History

Revision Publish Date Comments

1.0 03-Sep-19 Initial Release

Products A!ected

A!ected A!ected A!ected A!ected Release Number Comments


OS Type Software Release
Product

NON- Firepower 6.1 6.1.0, 6.1.0.1, 6.1.0.2, 6.1.0.3, 6.1.0.4, 6.1.0.5,


IOS Management 6.1.0.6, 6.1.0.7
Center
Software

NON- Firepower 6.2 6.2.0, 6.2.0.1, 6.2.0.2, 6.2.0.3, 6.2.0.4, 6.2.0.5,


IOS Management 6.2.0.6, 6.2.1, 6.2.2, 6.2.2.1, 6.2.2.2, 6.2.2.3,
Center 6.2.2.4, 6.2.2.5, 6.2.3, 6.2.3.1, 6.2.3.10,
Software 6.2.3.11, 6.2.3.12, 6.2.3.13, 6.2.3.14, 6.2.3.2,
6.2.3.3, 6.2.3.4, 6.2.3.5, 6.2.3.6, 6.2.3.7,
6.2.3.8, 6.2.3.9

NON- Firepower 6.3 6.3.0, 6.3.0.1, 6.3.0.2, 6.3.0.3, 6.3.0.4


IOS Management
Center
Software

NON- Firepower 6.4 6.4.0, 6.4.0.1, 6.4.0.2, 6.4.0.3, 6.4.0.4


IOS Management
Center
Software
Defect Information

Defect ID Headline

CSCvn30118 mysql-server.err !le is not fully deleted and keeps consuming Firepower disk space

CSCvq71217 High Disk Utilization due to mysql-server.err failing to rotate after CSCvn30118

Problem Description
The mysql-server.err log !le might consume excessive disk space on the Firepower security appliance.

Background
A"ected Firepower software versions might experience extended high disk utilization due to a failure
to properly rotate large mysql-server.err !les. This occurs after large mysql-server.err log !les are
rotated with the logrotate command. Although the !le is successfully rotated and compressed, the
pre-rotation disk space continues to be consumed since the mysql process maintains an open !le
handle to the deleted !le. This results in continued high disk utilization until either the mysql process or
the Firepower platform is restarted to release the disk resources.

Problem Symptom
Use the show disk command in order to view the ngfw disk utilization to determine if the condition
exists. The related information is highlighted in this command output.

> show disk


Filesystem Size Used Avail Use% Mounted on

rootfs 114G 437M 114G 1% /


devtmpfs 114G 2.5G 112G 3% /dev

tmpfs 126G 1.8M 126G 1% /run

tmpfs 126G 1.7M 126G 1% /var/volatile


/dev/sda1 7.5G 161M 7.3G 3% /mnt/boot

/dev/sda2 1.9G 32M 1.7G 2% /opt/cisco/config


/dev/sda3 4.5G 22M 4.3G 1% /opt/cisco/platform/logs

/dev/sda5 46G 53M 44G 1% /var/data/cores


/dev/sda6 191G 180G 12G 94% /ngfw <----- Output shows high disk utilization

cgroup_root 126G 0 126G 0% /dev/cgroups

Complete these steps in order to determine if the high ngfw disk utilization is due to the mysql-
server.err log !le:

1. Prior to log !le rotation, enter this command in order to show the disk space consumed by the
mysql-server.err !le.
root@Firepower:# ls -alh /ngfw/var/lib/mysql/mysql-server*

-rw-rw---- 1 mysql mysql 155G Nov 14 13:06 mysql-server.err <----- Output shows 155G log file

2. After the log !le has been rotated, enter this command in order to show the disk space consumed
by the rotated and compressed mysql-server.err !le.
root@Firepower:# ls -alh /ngfw/var/lib/mysql/mysql-server*
-rw-rw---- 1 mysql mysql 0 Nov 15 04:43 mysql-server.err
-rw-rw---- 1 mysql mysql 20 Nov 14 13:06 mysql-server.err.1.gz <----- Rotated and compressed
-rw-rw---- 1 mysql mysql 11G Nov 14 13:06 mysql-server.err.2.gz

3. After the log !le has been rotated, enter this command in order to show the disk space consumed
by the original mysql-server.err !le. The seventh column of the output shows that the mysql-
server.err log !le continues to consume disk space.
root@Firepower:# lsof | grep mysql-server.err.*deleted

mysqld 37580 mysql 1w REG 8,6 165427995057 10344


/ngfw/var/lib/mysql/mysql-server.err.1 (deleted) <----- Unrotated file continues to
consume 155G of disk space.

Workaround/Solution
Enter the "ush logs command in order to manually delete the mysql-server.err log !le:

root@Firepower:# OmniQuery.pl -db mdb -e "flush logs;"

For More Information


If you require further assistance, or if you have any further questions regarding this !eld notice, please
contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:
Open a service request on Cisco.com
By email
By telephone

Receive Email Noti#cation For New Field Notices


Cisco Noti!cation Service—Set up a pro!le to receive email updates about reliability, safety, network
security, and end-of-sale issues for the Cisco products you specify.

© 2020 Cisco and/or its a"liates. All rights reserved.

You might also like