Description

This article explains how to delete all pending Export jobs if the Cancel Export option is not available in the Web UI.

 

Symptoms

When events are Exported from the Log Activity page, the (Notify When Done) and (Cancel Export) options are offered, as shown in the image below:

alt

When attempting to export from the Log Activity page, however, the following message is sometimes encountered:

There are currently 1 exports(s) in progress, and 4 export(s) ahead of you in the queue. Do you want to proceed with the export?

In this situation, the question is: "How can you delete all pending export jobs if the (Cancel Export) option is not available in the Web UI?

 

Solution

This behavior is sometimes encountered when especially large events are exported.

 

Note: After the Export job command is executed from the Web UI, the exported file is saved temporarily under /store/exports .

  1. Stop all services. For information on how to do this, see this article: KB12771 - How to restart JSA (formerly STRM) processes / services [juniper.net] .

  2. Navigate to the directory /store/exports by using this command: cd /store/exports .

  3. List all the files in /store/exports by using this command: ls -al .

  4. Delete any file you find in /store/exports by using this command: rm -rf filename .

    Note: Here is an example exported filename: admin14052637892807189142138065156084.zip. "admin" indicates the user who ran the Export job from the Web UI.

  5. Start the services.

  6. Export events.

 

Modification History

2020-02-27: Article reviewed and updated for accuracy; references to STRM updated