I am having problems with our client's Ciscoworks LMS server losing so much disk space in just a short time. Their server's capacity is 83GB and was setup last June 2006. They started experiencing the problem 2 weeks ago. The database files: SyslogFirst, SyslogSecond, and SyslogThird under the folder C:\Program Files\CSCOpx\databases\rmeng are 16GB, 62GB, and 6GB respectively. The SyslogFirst was transferred to a different partition so that they can still have space on drive C:. We noticed that the file size of SyslogSecond is incrementing but not as fast as the syslog file under C:\Program Files\CSCOpx\log which is incrementing at a rate of 8-10 MB per minute. Whenever the server is experiencing low disk space, he transfers the syslog file to another partition to free up the C: drive.
Things that we did:
(1) We tried accessing the previous syslog file but it cannot be opened because it's about 16GB in size. The file might help us which device is frequently sending logs to the server.
(2) We just assumed that their Cisco PIX 535 is sending a lot of logs to the server so we deleted the device from the database under Common Services, but still the syslog file is incrementing. Tried ânet stop crmdmgtdâ but did not work. The only way that it stopped incrementing was to stop CWCS syslog service with a path C:\Program Files\CSCOpx\bin\crmlog.exe under Services on Computer Management of Windows 2003 Server.
(3) We have already setup a backup purge for syslog when it reaches 100MB.
(1) Is it ok if we delete/reduce the files SyslogFirst, SyslogSecond, and SyslogThird under C:\Program Files\CSCOpx\databases\rmeng?
(2) Is their any way on we can check what device sends the most logs to the server?
(3) Why is the Collection settings and Purge Settings window under RME\ Administration\Config Management\Archive Mgmt closes when we try to access it?
Your immediate response to this matter is highly appreciated. Thanks!