Description

This article explains the meaning of the message "logfile turned over due to -F request."

Solution

This message can be seen when viewing the log messages in a particular file that is configured for logging.

Example

The device has the following syslog configuration: 

syslog {
     archive size 100k files 3;
     user * {
         any emergency;
     }

     file f1 {
         any any;
         match RT_FLOW_SESSION_CLOSE;
     }
}

root@router> show log f1
Jan 31 23:54:42 router RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed response received: 172.27.201.32/0->10.0.0.4/11972 icmp
                172.27.201.32/0->10.0.0.4/11972 None None 1 p1 z1 z2 11313 1(84) 1(84) 4 UNKNOWN UNKNOWN N/A(N/A) ge-0/0/1.0
Jan 31 23:54:42 router RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed response received: 172.27.201.32/1->10.0.0.4/11972 icmp
                172.27.201.32/1->10.0.0.4/11972 None None 1 p1 z1 z2 11327 1(84) 1(84) 3 UNKNOWN UNKNOWN N/A(N/A) ge-0/0/1.0
Jan 31 23:54:44 router RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed response received: 172.27.201.32/2->10.0.0.4/11972 icmp
                172.27.201.32/2->10.0.0.4/11972 None None 1 p1 z1 z2 11328 1(84) 1(84) 4 UNKNOWN UNKNOWN N/A(N/A) ge-0/0/1.0
Jan 31 23:54:44 router RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed response received: 172.27.201.32/3->10.0.0.4/11972 icmp
                172.27.201.32/3->10.0.0.4/11972 None None 1 p1 z1 z2 11334 1(84) 1(84) 3 UNKNOWN UNKNOWN N/A(N/A) ge-0/0/1.0

If "request system storage cleanup" command is executed, the log files will include the line " logfile turned over due to -F request " as the first line of new log files because they were rotated during storage cleanup process. 

root@router> request system storage cleanup

root@router> show log f1
Jan 31 23:55:18 router newsyslog[32550]: logfile turned over due to -F request <-- this log is seen
Jan 31 23:56:18 router RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed response received: 172.27.201.32/0->10.0.0.4/11981 icmp
                172.27.201.32/0->10.0.0.4/11981 None None 1 p1 z1 z2 11338 1(84) 1(84) 3 UNKNOWN UNKNOWN N/A(N/A) ge-0/0/1.0
Jan 31 23:56:20 router RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed response received: 172.27.201.32/1->10.0.0.4/11981 icmp
                172.27.201.32/1->10.0.0.4/11981 None None 1 p1 z1 z2 11319 1(84) 1(84) 4 UNKNOWN UNKNOWN N/A(N/A) ge-0/0/1.0
Jan 31 23:56:20 router RT_FLOW: RT_FLOW_SESSION_CLOSE: session closed response received: 172.27.201.32/2->10.0.0.4/11981 icmp
                172.27.201.32/2->10.0.0.4/11981 None None 1 p1 z1 z2 11321 1(84) 1(84) 3 UNKNOWN UNKNOWN N/A(N/A) ge-0/0/1.0

This message does not indicate an error. It conveys that the previous log messages were deleted due to a forced request. This message can be deleted by manually clearing the log file.

Modification History

2025-2-27: Minor edits. 

2020-12-24: Added a scenario using request cleanup, which also triggers this message