This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Kiwi Syslog Server - Status Code 500

Hi everyone

I have the kiwi syslogs server 9.7.1 version.

I always have the problem 500 and the solution is the following steps already known.
1. Stop the Kiwi Syslog Server service.
2. Open the following directory:
-\Program Files\Solarwinds\Kiwi Syslog Web Access\html\App_Data\
3. Move Event#.sdf to an alternate location.
4. Copy Event-blank.sdf to Event.sdf
5. Start the Kiwi Syslog Server service

I have detected that the error arise when I arrive at 4 Gb in the folder.


In the setting of web access the limit is that value




This solution process is not scalable, there is some alternative to do a clean up o task to automatize this activity?

Thanks

Regards

  • Hi Shakaxl07,

    PowerShell is you friend! 

    Here is a script that should do what you want.

    You will need to change $old_events_folder (from 'C:\' to your folder of choice) and $folder to match your own environment (my Kiwi was in Program File (x86) ), but other wise it should be good to go.
    I will require to be run as elevated to Admin user, or it will fail to stop the Kiwi Service and probably not copy the files either. 

    Please test this and make sure you make back the folder up just in case!!!

    # Kiwi Server event file cleanup
    # 2022-04-12
    # yaquaholic
    
    #Define folder to store old event files in
    $old_events_folder = 'C:\<some where you want them to go>'
    
    #Stop the Kiwi Service
    $kiwi = Get-Service -name 'Kiwi Syslog Server'
    Stop-Service -Name $kiwi -Force
    
    #Define Events folder
    $folder = 'C:\Program Files (x86)\SolarWinds\Kiwi Syslog Web Access\html\App_Data'
    
    #Get the size of this folder
    $size = (Get-ChildItem -path $folder -recurse | Measure-Object -property length -sum ).sum /1MB
    
    #If it is bigger than 4GB
    if ($size -gt 4096)
       {
         #make a list of the event files with numbers in their name
         $event_files = Get-ChildItem -Path $folder\Event[0-9]*.sdf -Recurse
         #And the event-blank.sdf file
         $blank = Get-ChildItem -Path $folder\Event-blank.sdf
    
         #Loop through each file moving it to the $old_events_folder
         foreach ($file in $event_files)
            {
              Move-Item -Path $file -Destination $old_events_folder
            }
         #Copy event-blank.sdf to event.sdf
         Copy-Item -Path $blank -Destination $folder\Event.sdf
        }
    
    #Restart Kiwi service
    Start-Service -Name $kiwi -Force
    


    I will mention again, never blindly run a script of the internet, without understanding what it will do and it always good to make a back up of your data.


    Once you're happy that it work as expected, set the script to run as a Windows Scheduled Task.

    I hope it helps,
    Yaquaholic
    (Aka Rich)

  • Hi

    Thanks for the information, I want to probe the script, I will let you know the results