> Source: [sk122172](https://support.checkpoint.com/results/sk/sk122172)

# sk122172 - FWD process on log server stuck upon restart

| Property | Value |
|----------|-------|
| Solution ID | sk122172 |
| Date Created | 2017-12-30 |
| Last Modified | 2018-01-29 |
| Technical Level | Advanced |
| Products | Security Management Server, Multi-Domain Security Management Server |
| Versions | R82.10, R82, R81.20, R82.10, R81.20, R82 |
| OS | Gaia |

## Symptoms

- * FWD process is stuck for long time after restarting it on log server / CLM.
* No new logs from all managed Security Gateways arrive to this log server.
* After some time the issue is resolved by itself until next restart.
* fwd.elg shows new PID starts with following logs:  

  ```
  
  [fwd <PID> 2012575440]@cplog-00-01[] fwd: 
  
   Log asynch buffer size was initialized with size: 196608
   Log buffer initialized with size: 4096
   FireWall-1 Daemon is running
   syslog_run: syslogd was executed under pid XXXXX
   fwdgxsam_init(): gx_sam_proxy_create failed.
  ```

## Cause

*auto-clearing old-logs* was not configured. After low disk-space was identified on the log-server, log files were manually deleted from $FWDIR/log/, which is not a recommended solution, because each log has its related blob (indexing) file in folder $FWDIR/log/blob/.

As the corresponding blob files were not deleted, their amount started to grow with time. At some point, it takes too long for FWD to process all these blobs upon a restart, and after some time it succeeds and starts operating as expected.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content