This article explains how to delete all pending Export jobs if the Cancel Export option is not available in the Web UI.
When events are Exported from the Log Activity page, the (Notify When Done) and (Cancel Export) options are offered, as shown in the image below:
When attempting to export from the Log Activity page, however, the following message is sometimes encountered:
There are currently 1 exports(s) in progress, and 4 export(s) ahead of you in the queue. Do you want to proceed with the export?
In this situation, the question is: "How can you delete all pending export jobs if the (Cancel Export) option is not available in the Web UI?
This behavior is sometimes encountered when especially large events are exported.
Note: After the Export job command is executed from the Web UI, the exported file is saved temporarily under /store/exports .
/store/exports
Stop all services. For information on how to do this, see this article: KB12771 - How to restart JSA (formerly STRM) processes / services [juniper.net] .
Navigate to the directory /store/exports by using this command: cd /store/exports .
cd /store/exports
List all the files in /store/exports by using this command: ls -al .
ls -al
Delete any file you find in /store/exports by using this command: rm -rf filename .
rm -rf filename
Note: Here is an example exported filename: admin14052637892807189142138065156084.zip. "admin" indicates the user who ran the Export job from the Web UI.
admin14052637892807189142138065156084.zip.
Start the services.
Export events.
2020-02-27: Article reviewed and updated for accuracy; references to STRM updated