For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

njseq's avatar
njseq
Icon for Altostratus rankAltostratus
Jun 25, 2019

Is it safe to delete rewrite* files in /var/log?

Hello, I'm having huge amount of rewrite* files in the /var/log and I would like to know if it's safe to delete them? I have old one (3 weeks) different from current ones like rewrite3.1, rewrite5.1...
application delivery
BIG-IP Access Policy Manager (APM)
Dario_Garrido's avatar
Dario_Garrido
Icon for Noctilucent rankNoctilucent
Jun 25, 2019

Hello njseq

"The BIG-IP® system publishes logs for portal access traffic and for connections to virtual desktops (VDI) to the /var/log/rewrite* files. APM® cannot publish these logs to remote destinations."

REF - https://techdocs.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-network-access-12-0-0/11.html

>> Those log files are local, so you can remove them or move them to a different log server.

/var/log/rewrite<x>.log

"The rewrite log contains events from the rewrite profile. The <x> indicates the CPU instance that logged the rewrite info."

REF - https://support.f5.com/csp/article/K13595

>> Regarding the high volume of logging, I suspect that you are logging with a 'debug' level. I would check if vdi is in debug mode.

tmsh list /sys db log.vdi.level

KR,

Dario.