Thursday, May 2, 2024
Homepage · syslog
 Popular · Latest · Hot · Upcoming
19
rated 0 times [  19] [ 0]  / answers: 1 / hits: 77629  / 3 Years ago, sat, may 29, 2021, 6:41:16

I've got my mom's computer running Ubuntu 12.04 LTS. It's been working just fine but all of the sudden syslog has been filling up. And by filling up I mean I just deleted a /var/log/syslog that was 400GB in size. Yes - Gigabytes.



While I'm sure there was some useful information in there, I'm not sure that 400GB is any kind of information to sift through. And what's really amazing about it is that it happened within a period of 8 hours - I had ran df around noon, and between then and now her drive filled up 30% (from just under 70% to 100%).



What could be causing this and how could I fix it?`



EDIT
Looks like the usb is the offender:



Sep  8 08:52:10 pamela-desktop kernel: [ 6198.157829] usb 1-3: usbfs: process 1500 (demond_nscan) did not claim interface 3 before use

Sep  8 08:52:10 pamela-desktop kernel: [ 6198.157836] usb 1-3: usbfs: process 1500 (demond_nscan) did not claim interface 3 before use

Sep  8 08:52:10 pamela-desktop kernel: [ 6198.157842] usb 1-3: usbfs: process 1500 (demond_nscan) did not claim interface 3 before use

Sep  8 08:52:10 pamela-desktop kernel: [ 6198.157849] usb 1-3: usbfs: process 1500 (demond_nscan) did not claim interface 3 before use

Sep  8 08:52:10 pamela-desktop kernel: [ 6198.157857] usb 1-3: usbfs: process 1500 (demond_nscan) did not claim interface 3 before use

Sep  8 08:52:10 pamela-desktop kernel: [ 6198.157863] usb 1-3: usbfs: process 1500 (demond_nscan) did not claim interface 3 before use

Sep  8 08:52:10 pamela-desktop kernel: [ 6198.157870] usb 1-3: usbfs: process 1500 (demond_nscan) did not claim interface 3 before use

Sep  8 08:52:10 pamela-desktop kernel: [ 6198.157877] usb 1-3: usbfs: process 1500 (demond_nscan) did not claim interface 3 before use

Sep  8 08:52:10 pamela-desktop kernel: [ 6198.157884] usb 1-3: usbfs: process 1500 (demond_nscan) did not claim interface 3 before use

Sep  8 08:52:10 pamela-desktop kernel: [ 6198.157891] usb 1-3: usbfs: process 1500 (demond_nscan) did not claim interface 3 before use

More From » syslog
 Answers
3

You should find out what is causing the large amount of messages, as if you fix this issue then you fix the large log file.



However, until then you can put in a log rotation base on one of the below.




  • time ( eg. rotate every day )

  • size ( eg. rotate when the file reaches 10mb )



This will already be setup on the system by default: /etc/logrotate.d/rsyslog



 /var/log/syslog

{

    rotate 7

    daily

    missingok

    notifempty

    delaycompress

    compress

    postrotate

            reload rsyslog >/dev/null 2>&1 || true

    endscript

 }


From this you can see that it will rotate he /var/log/syslog file daily and keep 7 copies of the rotated file.



You can change this to be rotate on a size limit, say 1mb or reduce how many copies it stores.



Warning: This will not fix the root cause of your issue, however it will buy you some time as it will stop the file system from filling up.




  • Source: /etc/logrotate.d/rsyslog

  • Source: man logrotate


[#35710] Monday, May 31, 2021, 3 Years  [reply] [flag answer]
Only authorized users can answer the question. Please sign in first, or register a free account.
odyroc
Add To Favorites
Follow
Total Points: 324
Total Questions: 109
Total Answers: 103
Location: Belize
Member since Mon, Apr 17, 2023
1 Year ago
odyroc questions
Sat, Dec 10, 22, 13:56, 1 Year ago
Mon, Dec 26, 22, 00:22, 1 Year ago
Sat, May 21, 22, 08:16, 2 Years ago
Tue, Dec 28, 21, 21:29, 2 Years ago
Sun, Apr 2, 23, 03:42, 1 Year ago
View All
;