Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[MX] Understanding the message "logfile turned over due to -F request"

0

0

Article ID: KB26848 KB Last Updated: 24 Dec 2020Version: 2.0
Summary:

This article explains the meaning of the message "logfile turned over due to -F request."

 

Solution:

This message can be seen when viewing the log messages in a particular file that is configured for logging.

Example

The device has the following syslog configuration:

syslog {
     archive size 100k files 3;
     user * {
         any emergency;
     }

     file f1 {
         any any;
         match RT_FLOW_SESSION_CLOSE;
     }
}

root@router# run show log f1

Jan 31 23:54:42 router RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed response received: 172.27.201.32/0->10.0.0.4/11972 icmp
                172.27.201.32/0->10.0.0.4/11972 None None 1 p1 z1 z2 11313 1(84) 1(84) 4 UNKNOWN UNKNOWN N/A(N/A) ge-0/0/1.0
Jan 31 23:54:42 router RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed response received: 172.27.201.32/1->10.0.0.4/11972 icmp
                172.27.201.32/1->10.0.0.4/11972 None None 1 p1 z1 z2 11327 1(84) 1(84) 3 UNKNOWN UNKNOWN N/A(N/A) ge-0/0/1.0
Jan 31 23:54:44 router RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed response received: 172.27.201.32/2->10.0.0.4/11972 icmp
                172.27.201.32/2->10.0.0.4/11972 None None 1 p1 z1 z2 11328 1(84) 1(84) 4 UNKNOWN UNKNOWN N/A(N/A) ge-0/0/1.0
Jan 31 23:54:44 router RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed response received: 172.27.201.32/3->10.0.0.4/11972 icmp
                172.27.201.32/3->10.0.0.4/11972 None None 1 p1 z1 z2 11334 1(84) 1(84) 3 UNKNOWN UNKNOWN N/A(N/A) ge-0/0/1.0

If executing request log rotate force or request system storage cleanup or request system storage cleanup dry-run, the log files will show the message "logfile turned over due to -F request" appended to the new log, "None".

root@router>request log rotate force

root@router# run show log f1
Jan 31 23:55:18 router newsyslog[32550]: logfile turned over due to -F request <-- this log is seen
Jan 31 23:56:18 router RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed response received: 172.27.201.32/0->10.0.0.4/11981 icmp
                172.27.201.32/0->10.0.0.4/11981 None None 1 p1 z1 z2 11338 1(84) 1(84) 3 UNKNOWN UNKNOWN N/A(N/A) ge-0/0/1.0
Jan 31 23:56:20 router RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed response received: 172.27.201.32/1->10.0.0.4/11981 icmp
                172.27.201.32/1->10.0.0.4/11981 None None 1 p1 z1 z2 11319 1(84) 1(84) 4 UNKNOWN UNKNOWN N/A(N/A) ge-0/0/1.0
Jan 31 23:56:20 router RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed response received: 172.27.201.32/2->10.0.0.4/11981 icmp
                172.27.201.32/2->10.0.0.4/11981 None None 1 p1 z1 z2 11321 1(84) 1(84) 3 UNKNOWN UNKNOWN N/A(N/A) ge-0/0/1.0

This message does not indicate an error. It conveys that the previous log messages were deleted due to a forced request. This message can be deleted by manually clearing the log file.

 

Modification History:

2020-12-24: Added a scenario using request cleanup, which also triggers this message

 

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search