topic Re: VAR FULL in Operating System - HP-UX

VAR FULL

Shattia Moorthi — Mon, 04 Apr 2011 02:15:45 GMT

dear expert vg00/lvol9 var full how to do house keeping this folder.

thanks

Re: VAR FULL

madhuchakkaravarthy — Mon, 04 Apr 2011 03:20:00 GMT

hi

post the output of du -sk* | sort -nr.

check for large files and if permits u can nullify it.

eg: >/var/adm/syslog/syslog.log.
check if auditing is enabled.
check for mail msg from root and other user may be oracle or other application.

if u have free PE in vg00 and if online jfs installed u can extend it easily,if not boot in to single user mode and lvextend and extendfs.

post the output of du -sk *|sort -nr and
vgdisplay -v vg00

for better result.

regards

MC

Re: VAR FULL

Dennis Handly — Mon, 04 Apr 2011 03:23:23 GMT

At least two major areas:
1) /var/tmp
Just remove old and/or large files.

2) /var/adm/sw

Here you have to be very careful otherwise you'll never be able to patch your machine.
You need to look at committing patches or use cleanup(1m): "cleanup -c 1".
This commits patches that have superseded at least once.

Re: VAR FULL

Abid Iqbal — Mon, 04 Apr 2011 04:28:11 GMT

Hi,
Share the output
du -k -x | sort -rn
Are you running appache2?

Re: VAR FULL

Shattia Moorthi — Mon, 04 Apr 2011 04:34:28 GMT

hi madhu,

Attached with txt file.

How to check whether its we have free PE in vg00 and online jfs
Can u give the step that how to do lvextend.

thanks

Re: VAR FULL

Shattia Moorthi — Mon, 04 Apr 2011 04:38:49 GMT

here is the out put for du -k -x |sort -rn

Re: VAR FULL

Abid Iqbal — Mon, 04 Apr 2011 04:58:56 GMT

Better is to go to /var
# cd /var
and run the command.
# du -k -x | sort -rn
the look for the larger folder and go inside it and run the command and so on.
In this way you can trace the larger file and treat it accordingly.

Re: VAR FULL

Dennis Handly — Mon, 04 Apr 2011 05:04:56 GMT

>Attached with txt file.
>11451696 var

I think the intention was to do this in var:
du -kxs /var/*

Re: VAR FULL

Shattia Moorthi — Mon, 04 Apr 2011 05:12:23 GMT

dear adis & denis

pls refer attached file.

Re: VAR FULL

Abid Iqbal — Mon, 04 Apr 2011 05:17:01 GMT

As per shared file
6426688 ./spool/mqueue is taking large space.
Empty mail queue.
1361056 ./adm/crash/crash.0 and
972456 ./adm/crash/crash.1 are taking large space.
Delete the older crash if not needed.
In this way you can manage to release space.

Re: VAR FULL

Shattia Moorthi — Mon, 04 Apr 2011 05:23:56 GMT

dear iqbal i not unix expert, please provide me the command. thanks in advance

Re: VAR FULL

Dennis Handly — Mon, 04 Apr 2011 05:40:26 GMT

>refer attached file.
6426688 ./spool/mqueue

You have a bunch of bounced or unsendable mail.

1361056 ./adm/crash/crash.0
972456 ./adm/crash/crash.1

How old are these? If old, you may want to remove all but the INDEX file.

1187704 ./adm/sw/save

cleanup(1m) may help here.

1298368 /var/opt

You would need to do a summary of directories in there.

Re: VAR FULL

Abid Iqbal — Mon, 04 Apr 2011 05:40:53 GMT

Share the output of
# ls -ltr /var/spool/mqueue
# ls -ltr /var/adm/crash

Re: VAR FULL

Dennis Handly — Thu, 04 Aug 2011 16:30:15 GMT

>I not unix expert, please provide me the command.

(This is scary, a sysadmin must be one.)

For /var/adm/crash/, just remove the directory or parts.

For /var/spool/mqueue/, try mailq(1).
And you could look at my scripts in:
http://h30499.www3.hp.com/t5/Messaging/Help-in-clearing-out-var-spool-mqueue/m-p/5276091#M5434

Re: VAR FULL

Shattia Moorthi — Mon, 04 Apr 2011 07:00:56 GMT

Dear frenz

Thank you Dennis and Abid.

I manage to clear mqueue. Now /VAR become 44%

Thanks again

Re: VAR FULL

Abid Iqbal — Mon, 04 Apr 2011 09:05:21 GMT

Hi, Must assign points.
Thanks