VAR FULL

[Shattia Moorthi]

dear expert vg00/lvol9 var full how to do house keeping this folder.

thanks

[madhuchakkaravarthy]

hi

post the output of du -sk* | sort -nr.

check for large files and if permits u can nullify it.

eg: >/var/adm/syslog/syslog.log.
check if auditing is enabled.
check for mail msg from root and other user may be oracle or other application.

if u have free PE in vg00 and if online jfs installed u can extend it easily,if not boot in to single user mode and lvextend and extendfs.

post the output of du -sk *|sort -nr and
vgdisplay -v vg00

for better result.


regards

MC

[Dennis Handly]

At least two major areas:
1) /var/tmp
Just remove old and/or large files.

2) /var/adm/sw

Here you have to be very careful otherwise you'll never be able to patch your machine.
You need to look at committing patches or use cleanup(1m): "cleanup -c 1".
This commits patches that have superseded at least once.

[Abid Iqbal]

Hi,
Share the output
du -k -x | sort -rn
Are you running appache2?

[Shattia Moorthi]

hi madhu,

Attached with txt file.

How to check whether its we have free PE in vg00 and online jfs
Can u give the step that how to do lvextend.

thanks

[Shattia Moorthi]

here is the out put for du -k -x |sort -rn

[Abid Iqbal]

Better is to go to /var
# cd /var
and run the command.
# du -k -x | sort -rn
the look for the larger folder and go inside it and run the command and so on.
In this way you can trace the larger file and treat it accordingly.

[Dennis Handly]

>Attached with txt file.
>11451696 var

I think the intention was to do this in var:
du -kxs /var/*

[Shattia Moorthi]

dear adis & denis

pls refer attached file.

[Abid Iqbal]

As per shared file
6426688 ./spool/mqueue is taking large space.
Empty mail queue.
1361056 ./adm/crash/crash.0 and
972456 ./adm/crash/crash.1 are taking large space.
Delete the older crash if not needed.
In this way you can manage to release space.

[Shattia Moorthi]

dear iqbal i not unix expert, please provide me the command. thanks in advance

[Dennis Handly]

>refer attached file.
6426688 ./spool/mqueue

You have a bunch of bounced or unsendable mail.

1361056 ./adm/crash/crash.0
972456 ./adm/crash/crash.1

How old are these? If old, you may want to remove all but the INDEX file.

1187704 ./adm/sw/save

cleanup(1m) may help here.

1298368 /var/opt

You would need to do a summary of directories in there.

[Abid Iqbal]

Share the output of
# ls -ltr /var/spool/mqueue
# ls -ltr /var/adm/crash

[Dennis Handly]

>I not unix expert, please provide me the command.

(This is scary, a sysadmin must be one.)

For /var/adm/crash/, just remove the directory or parts.

For /var/spool/mqueue/, try mailq(1).
And you could look at my scripts in:
http://h30499.www3.hp.com/t5/Messaging/Help-in-clearing-out-var-spool-mqueue/m-p/5276091#M5434

[Shattia Moorthi]

Dear frenz

Thank you Dennis and Abid.

I manage to clear mqueue. Now /VAR become 44%

Thanks again

[Abid Iqbal]

Hi, Must assign points.
Thanks