Server Edition 11.1.2.3 Hard Drive Full

[ScotttB]

I've seen several systems recently that the hard drive was nearly full because of the all files in the /var/log/audit folder and I have had to manually delete them. Has anyone seen this and is there a setting that I need change so they are deleted (rotated)out? I've read some blogs about Linux audit log rotation, but is this something that Avaya should already be doing?

 

[sizbut]

Don't know if this is the cause, but historically 9 times out of 10 one-X Portal is the villain in cases of log files piling up, even if you think you're not using it. Seems to have a bad habit of switching itself to verbose mode. So a visit to one-X Portal admin menus might help.

Otherwise look at the logs on the Platform View menus to see if any other application stands out in the number and size of logs it is producing.

Stuck in a never ending cycle of file copying.

 

[tlpeter]

Hi scotttB, you can add a rule to the logrotate.d where you can oconfigure this logrotate for a certain log.
Here an example of such a rule on our (totally different) system:

Samba:

/var/log/samba/log.* {
    compress
    dateext
    maxage 365
    rotate 99
    notifempty
    olddir /var/log/samba/old
    missingok
    copytruncate
}

Asterisk:

/etc/logrotate.d/asterisk                                                                                                                                                                                                                                    323/323               100%
/var/log/asterisk/debug /var/log/asterisk/console /var/log/asterisk/full /var/log/asterisk/messages /var/log/asterisk/*log {
        weekly
        missingok
        rotate 52
        compress
        delaycompress
        notifempty
        create 640 root root
        sharedscripts
        postrotate
                /usr/sbin/asterisk -rx 'logger reload' > /dev/null 2> /dev/null
        endscript
}

Search logrotate on CentOS and you will find some examples for that.



BAZINGA!

I'm not insane, my mother had me tested!

 

[wayner3]

I too have had this issue (/dev/sda3 95%) with a Server Select IPO. I logged in via SSH via root and checked for any heavy disk usage (df -h). The following is what I found:
/var/log/audit (worst culprit)
/opt/Avaya/oneXportal/*/apache-tomcat/logs (as sizbut noted)
/opt/Avaya/apache-tomcat/logs
After manually removing (/dev/sda3 is 70%). However, in the /opt/Avaya/apache-tomcat/logs folder is a file that is almost 3G in size. They had issues with this one back in Rls 8
Not sure if you can delete it or would delete it.

1 tomcat tomcat 2.9G Aug 10 16:33 catalina.out