Alert Type

PSN - Product Support Notification

Product Affected

Junos Space Security Director Log Collector

Alert Description

An issue with the file descriptors limit has been found.
By default, the limit is set to 20K on Space.  Receiving logs for more than 3 weeks with continuous data may exhaust the file descriptor limit.

This issue is seen only in the case of 16.1r1 Integrated Log Collector running on a Junos Space VM / JA2500 Appliance.

Solution

This will be fixed in SD 16.2R1.

Workaround:

After installation of Integrated Log Collector, edit the following two files on the Junos Space Platform:

Note: Change the values on the Junos Space Platform running Integrated Log Collector.

/etc/security/limits.conf     (Change the following two lines)

 
Change this:
* soft nofile 20480
* hard nofile 20480

To this:
* soft nofile 65536
* hard nofile 65536
 

/etc/sysctl.conf     (Change the fs.file-max to 65536, save the changes)

fs.file-max=65536
 

Then run the following command from Space CLI:

echo 65536 > /proc/sys/fs/file-max