topic Re: System logs in Operating System - HP-UX

System logs

Sarwan — Mon, 20 Jul 2009 05:43:57 GMT

My /var FileSystem is full
After investigating found core files under /var/opt/wbem is huge.
Please suggest me how to go about it.

Re: System logs

Roopesh Francis_1 — Mon, 20 Jul 2009 05:59:58 GMT

Sarwan,

You can move core file to temparary area however you need to find out why this core has been created.

Thanks

Re: System logs

Duncan Edmonstone — Mon, 20 Jul 2009 06:05:36 GMT

What agent failed here - what is the output of:

file /var/opt/wbem/core

HTH

Duncan

Re: System logs

Michal Kapalka (mikap) — Mon, 20 Jul 2009 06:06:16 GMT

hi,

if you are sure that is a core file,

them you can delete it to have a /var filesystem writable ( free ) for other more important logs.

mikap

PS : don't forget find out why this file was created.

Re: System logs

Ganesan R — Mon, 20 Jul 2009 06:42:13 GMT

Hi,

It means, application installed on /var/opt/wbem created the core file. You can use #file to get the details about the core file.

If you don't want the core file to be analysed, you can safely remove the core file.

Re: System logs

Sarwan — Mon, 20 Jul 2009 06:42:59 GMT

How to read those file. I tried gdb but it was not working.
Also i have a option of extending the File System but wanted to know other work around

Re: System logs

Sarwan — Mon, 20 Jul 2009 06:44:45 GMT

When i use File it shows as
root@>file core
core: ELF-64 core file - IA64

Re: System logs

Michal Kapalka (mikap) — Mon, 20 Jul 2009 06:47:53 GMT

hi,

temporary move it to another mount poit thats is not so filling up, and them you can analyze the core file with a debugger.

mikap

Re: System logs

Sarwan — Mon, 20 Jul 2009 06:55:20 GMT

mikap, It is such a huge file that even /tmp doesn't have space to accomodate. It is keeping on increasing and /var is already 98%

Re: System logs

Michal Kapalka (mikap) — Mon, 20 Jul 2009 06:57:59 GMT

hi,

ok if i would be in your situation, the file will be immediately deleted.

mikap

Re: System logs

Sarwan — Mon, 20 Jul 2009 07:01:20 GMT

Yes i can do that but wanted to know what would it contain as i am unable to read that.
If atall it is required for any future reference what would i do.

Re: System logs

Michal Kapalka (mikap) — Mon, 20 Jul 2009 07:07:38 GMT

hi,

check this link on ITRC - "How to analyze the core files created by applications" :

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1135986

hope it help you.

mikap

Re: System logs

Sarwan — Mon, 20 Jul 2009 07:57:47 GMT

I used strings and was able to read the file. It was about some power saved that was ON generating error

Re: System logs

Dennis Handly — Mon, 20 Jul 2009 08:41:54 GMT

>After investigating found core files under /var/opt/wbem is huge.

If you don't care you can just remove them. You may want to use "file core" to see if they are the same, if so, you don't need more than one and they don't have to be in /var/.

>How to read those file? I tried gdb but it was not working.

Not working how? You need to use:
$ gdb absolute-path-executable core
(gdb) bt
(gdb) q

>When I use file it shows as
core: ELF-64 core file - IA64

It should give the name of the executable and the signal.

>wanted to know what would it contain as I am unable to read that.

If file(1) doesn't tell you the executable, the file maybe truncated, so next to useless.

>Ganesan: It means, application installed on /var/opt/wbem/ created the core file.

No, it means that the CWD was there.

Re: System logs

Sarwan — Tue, 28 Jul 2009 07:43:46 GMT

My issue is resolved