System logs

[Sarwan]

My /var FileSystem is full
After investigating found core files under /var/opt/wbem is huge.
Please suggest me how to go about it.

[Roopesh Francis_1]

Sarwan,

You can move core file to temparary area however you need to find out why this core has been created.

Thanks

[Duncan Edmonstone]

What agent failed here - what is the output of:

file /var/opt/wbem/core

HTH

Duncan

[Michal Kapalka (mikap)]

hi,

if you are sure that is a core file,

them you can delete it to have a /var filesystem writable ( free ) for other more important logs.

mikap

PS : don't forget find out why this file was created.

[Ganesan R]

Hi,

It means, application installed on /var/opt/wbem created the core file. You can use #file to get the details about the core file.

If you don't want the core file to be analysed, you can safely remove the core file.

[Sarwan]

How to read those file. I tried gdb but it was not working.
Also i have a option of extending the File System but wanted to know other work around

[Sarwan]

When i use File it shows as
root@>file core
core: ELF-64 core file - IA64

[Michal Kapalka (mikap)]

hi,

temporary move it to another mount poit thats is not so filling up, and them you can analyze the core file with a debugger.

mikap

[Sarwan]

mikap, It is such a huge file that even /tmp doesn't have space to accomodate. It is keeping on increasing and /var is already 98%

[Michal Kapalka (mikap)]

hi,

ok if i would be in your situation, the file will be immediately deleted.

mikap

[Sarwan]

Yes i can do that but wanted to know what would it contain as i am unable to read that.
If atall it is required for any future reference what would i do.

[Michal Kapalka (mikap)]

hi,

check this link on ITRC - "How to analyze the core files created by applications" :

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1135986

hope it help you.

mikap

[Sarwan]

I used strings and was able to read the file. It was about some power saved that was ON generating error

[Dennis Handly]

>After investigating found core files under /var/opt/wbem is huge.

If you don't care you can just remove them. You may want to use "file core" to see if they are the same, if so, you don't need more than one and they don't have to be in /var/.

>How to read those file? I tried gdb but it was not working.

Not working how? You need to use:
$ gdb absolute-path-executable core
(gdb) bt
(gdb) q

>When I use file it shows as
core: ELF-64 core file - IA64

It should give the name of the executable and the signal.

>wanted to know what would it contain as I am unable to read that.

If file(1) doesn't tell you the executable, the file maybe truncated, so next to useless.

>Ganesan: It means, application installed on /var/opt/wbem/ created the core file.

No, it means that the CWD was there.

[Sarwan]

My issue is resolved