How to clear /var/spool/output/msglog folder

Can someone tell me is it safe to delete content of /var/spool/output/msglog folder?

Hard drive on clients SG135 (converted to XG v18.04) is full and because of that mails sre blocked:

console> system diagnostics show disk

Partition        Utilization(%)

===============================

configuration        10%

content               2%

report              100%

===============================

SG135_XN01_SFOS 18.0.4 MR-4# du -sh /var/spool/output/msglog

231.4G  /var/spool/output/msglog

===============================

I have tried to delete reports from GUI (Report settings - manual purge) and from CLI (Advanced shell - purge reports) but it was helpful for a moment - it created about 20GB of free space but it was lost in two days. Disk was full again and previous steps was not helpful any more.

So, i have about 1400 files (each about 165MB size) that has occupied HDD and now XG is blocking sending and recieving mails.

Is it safe to delete those files with rm /var/spool/outout/msglog/* ?

Any idea? I am not running out of time ... i was two days ago so pls

Thanks in advance



Added TAG
[edited by: emmosophos at 11:22 PM (GMT -7) on 20 Apr 2021]
  • Hi,

    changing the retention time of your reports should automatically reduce the number of files stored.

    Ian

     
    V18.0.x - e3-1225v5 6gb ram with 4 ports - 20w. 
    3 AP55s and 2 APX120s having a holiday until software update is released.
    If a post solves your question use the 'This helped me' link.
  • I have reduced Log retention Report period to minimum (1 month) for all reports and did Manual purge again. No luck:

    SSG135_XN01_SFOS 18.0.4 MR-4# du -sh /var/spool/output/msglog                    
    229.3G  /var/spool/output/msglog  
    All files has a date from yesterday:

    -rw-r--r--    1 root     0        177668291 Apr 20 18:47 zxIZXV-2m7vDn-nL       
    -rw-r--r--    1 root     0        177770498 Apr 20 18:47 zxMXcr-oK5pyP-0r      
  • I have managed to solve problem ... a lot of mails was stuck in Exim and (luckily for me) i have found similar situation with script that has helped me with this:

    https://community.sophos.com/sophos-xg-firewall/f/discussions/126237/v18-mta-smtp-general-questions

    I changed one line to adjust script and deleted stucked mails:

    # service smtpd:stop -ds nosync
    200 OK
    # exim -bp | awk '{print $2}' | while IFS= read -r line; do
    > exim -Mrm $line
    > done

    # rm /var/spool/output/db/*
    # service smtpd:start -ds nosync

    print $2 instead $3 has gave me Message ID instead sender because command exim -Mrm works with Message ID