Due to a glitch during the ISP migration, we got millions of entries in the log on that date, and now all of the log views in the admin web UI show nothing but that date for some reason.
I deleted /var/log/filter.log and rebooted but still see that date and nothing but that date.
How can I purge that date's entries?
What does the "Firewall: Log Files: Plain View" -> "Clear log" button (bottom right) do? (I don't care to poke it on my live device.)
Does nobody know?
Doesn't the "Clear Log" button in the UI work for you?
Maybe awk sed the filter.log file to delete lines for that one date?
Or ssh in, stop fw service, rm or mv filter.log, then touch filter.log, just make note of perms from ls -a filter.log before deleting, chmod perms as needed, restart fw service.
That is, if the gui button does not work.
filter.log is a binary file that contains of 512kB of ASCII 0x00 but I still see log entries through the UI.
I do not want to clear all records, only those that are result of the glitch. There are valuable records from other dates.
There seems to be no correlation between the contents of filter.log and that which the UI is showing.