/var grow up irregular

[whiteknight]

Hi Achillies


Tips to clean wtmps/btmps
http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en&docId=emr_na-c01016434-2


Thanks
WK

[RobinKing]

Another common 'space eater' is the /var/adm/sw/save directory. If your system is at a stable patch level, you could run a cleanup to remove superseded patches.

cleanup -c 2

This will remove all patches that have been superseded twice or more. You can run the command with -p to preview, and the output will tell you exactly how much space you could reclaim.

Use with care though.

[tsf_1]

I agree to find out any huge files in /var:

# find /var -xdev -size +10000000c (To list around >10MB)

[JorgeUX]

Hi guys, I was having the same problem.

Right now the filesystem /var is increasing and decreasing in a few minutes, between 58% and 75%, but most of the time is in the lower.

Do you have any Idea why is this happening or what can I check?

Thanks.

[Patrick Wallek]

I would monitor /var/tmp first.  My guess is that something is creating and destroying temporary files.

You could always try something like:

find /var -type f -mtime -1 -exec ls -ld {} \;

to try to find files that are less than 1 day old.

[Dennis Handly]

>Do you have any idea why is this happening or what can I check?

Have you looked at what the most recent files are and who the owner is?

[JorgeUX]

This is a sample of the output of the command

find /var -type f -mtime -1 -exec ls -ld {} \;
....
-rw-r--r--   1 root       root           452 Jul 25 15:45 /var/stm/logs/tools/1_0_8_1_0_4_0_2_3_1_1_9_2/info/test_activity_log
-rw-r--r--   1 root       root          1316 Jul 25 15:45 /var/stm/logs/tools/1_0_8_1_0_4_0_2_3_1_1_9_2/info/info_log_msg
-rw-r--r--   1 root       root           452 Jul 25 15:45 /var/stm/logs/tools/1_0_8_1_0_4_0_2_3_1_1_9_3/info/test_activity_log
-rw-r--r--   1 root       root          1316 Jul 25 15:45 /var/stm/logs/tools/1_0_8_1_0_4_0_2_3_1_1_9_3/info/info_log_msg
-rw-r--r--   1 root       root           452 Jul 25 15:45 /var/stm/logs/tools/1_0_8_1_0_4_0_2_3_1_1_9_4/info/test_activity_log
-rw-r--r--   1 root       root          1316 Jul 25 15:45 /var/stm/logs/tools/1_0_8_1_0_4_0_2_3_1_1_9_4/info/info_log_msg
-rw-r--r--   1 root       root           452 Jul 25 15:55 /var/stm/logs/tools/64000_0xfa00_0x12/info/test_activity_log
-rw-r--r--   1 root       root          1316 Jul 25 15:55 /var/stm/logs/tools/64000_0xfa00_0x12/info/info_log_msg
-rw-r--r--   1 root       root           452 Jul 25 15:55 /var/stm/logs/tools/64000_0xfa00_0x15/info/test_activity_log
-rw-r--r--   1 root       root          1316 Jul 25 15:55 /var/stm/logs/tools/64000_0xfa00_0x15/info/info_log_msg
-rw-r--r--   1 root       root           452 Jul 25 15:55 /var/stm/logs/tools/64000_0xfa00_0x4/info/test_activity_log
-rw-r--r--   1 root       root          1316 Jul 25 15:55 /var/stm/logs/tools/64000_0xfa00_0x4/info/info_log_msg
-rw-r--r--   1 root       root           452 Jul 25 15:55 /var/stm/logs/tools/64000_0xfa00_0x16/info/test_activity_log
...

 There are several files with this description, another batch of them are from DB.

[V. Nyga]

>Right now the filesystem /var is increasing and decreasing in a few minutes
Well, that sounds ok - applications are writing temp log-files and delete it again.

Just check the [edit](above already) mentioned directories:
/var/tmp
/var/adm/crash

Superseeded patches:

Check it with 'cleanup -p -c 2'
then recover space with 'cleanup -c 2'

HTH
V.

[Pete Randall]

All those logs would suggest some diagnostic activity.  Any hardware issues in the system?  Take a look at dmesg output and syslog for errors.   Other than that, this might be completely normal.

[JorgeUX]

Thanks all.