Simpler Navigation coming for Servers and Operating Systems
Coming soon: a much simpler Servers and Operating Systems section of the Community. We will combine many of the older boards, and you won't have to click through so many levels to get at the information you need. If you are looking for an older board and do not find it, check the consolidated boards, as the posts are still there.
Showing results for 
Search instead for 
Did you mean: 

/var 99%

Go to solution

/var 99%

Why the file system /var is 99%?
what would I check?

Hello everyone
Patrick Wessel
Honored Contributor

Re: /var 99%

Check if there are any dumps in /var/adm/crash
There is no good troubleshooting with bad data
Andy Monks
Honored Contributor

Re: /var 99%

You might have lots in /var/adm/sw/patches too

Assuming you don't ever want to back out a patch you can do :-

swlist -l fileset -a name | grep PH > /tmp/patchlist
swmodify -x patch_commit=true -f /tmp/patchlist
Andreas Voss
Honored Contributor

Re: /var 99%

Look at /var/adm/wtmp
It's the history file for logins
You can shrink it with:
James R. Ferguson
Acclaimed Contributor

Re: /var 99%


You might want to run cleanup (see man pages) to remove swinstall's saved patch files no longer needed.

You might also want to use SAM (routine_tasks -> system_log_files) to trim the sizes of log files.

Anthony deRito
Respected Contributor

Re: /var 99%

In addition to the suggestions mentioned above, you can get a glimpse of what directories are consuming the most space by:

#cd /var
# du -x | sort -n

You will notice the block counts on the left and the directories on the right. Look at the bootom of the list to see the directories that have the largest block count. These are 512 byte blocks. This will give you a good idea of directory sizes.

To find large files, use the folowing command:

#cd /var
#find . -xdev -size +$1c -exec ll -lt {} ;

Start with $1 set to a moderate number like 5000000 then run the command again while increasing the value of $1 to shrink the list and find the largest files.

Hope this helps.

Fred Martin_1
Valued Contributor

Re: /var 99%

Don't forget that /usr/tmp is normally a link to /var/tmp ... so check /usr/tmp for large junk files.
Jamie Rancourt
Occasional Advisor

Re: /var 99%

Also, verify that sendmail is working. the mail queue is located in /var/spool/mqueue and can fill up quite quickly.

John Hall
Frequent Advisor

Re: /var 99%


As you can see from previous suggestions there are many places you can look to free up space. To summarize:

1) /var/mail (you can edit the mail files for other users to delete old mail)

2) /var/adm/crash (if crash files are old or unneeded then delete them)

3) /var/tmp (fills up with various system overhead files: CRON output, aborted editor sessions, etc. Be careful about deleting these files because they could be currently in use. Do "cd /var/tmp; ls | xargs -i -t fuser -fu {}" and the files being used will appear as "myfilename: 12345o(userid)", you can delete the ones not in use.

4) /var/preserve (old aborted shell sessions(?), etc)

5) The cleanup utility will trim the system log files and will remove installed patch files (which will commit them). First backup all files and directories under /var/adm/sw/patch. If cleanup is not installed then install patch "PHCO_12140 B.10.00.00.AA patch cleanup utility" and execute "cleanup -F".

-Good hunting!
Vincente Fernandes
Valued Contributor

Re: /var 99%

Besides /var/adm/sw/patches, /var/adm/cron, /var/adm/wtmp, /var/adm/btmp, /var/mail etc. one more important directory is /var/adm/syslog. Usually most of the time this directory also occupies space as file "syslog.log" goes on filling up daily. These depends upon what at whate level debugging is set with syslogd daemon. I found on our servers "syslog.log" file goes on increasing like anything on a daily basis, so i used a script a trim the file accordingly.

Re: /var 99%


If /var is filling up , the following are the things that you should do..

1. find /var -name core
( Remove the unwanted core files..)

2. find /var -size +10000 -xdev -exec ll {} ;
( To get files larger than specified.. and find out who's created and delete them..)

3. There is a command called 'cleanup' from hp to cleanup the patch leftovers..
You can use this to cleanup the patches and free space

4. If you use hfs , you can set the minfree to 5% or less to increase the avail. space.

tunefs -m 5 /dev/vgXX/lvolX

Hope this help.


Life is to LEARN , not to LIVE
Vince Arends
Frequent Advisor

Re: /var 99%

Oracle 8.0.5, if running on your machine, could be the culprit. Check /var/tmp for files that end with .t and .TMP.