Troubleshooting
Problem
You noticed the file system on the Guardium appliance is filling up.
Cause
If you have Guardium configured to send alerts, reports, etc to the syslog, this information gets logged on the messages files of the Linux OS file system.
Too much information sent to the syslog can cause the messages files to grow very large and fill the file system to 100%.
Diagnosing The Problem
By default, the messages log files will rotate weekly and keep 5 files.
To reduce the risk of having too much information on the messages files, you may change the log rotation strategy for the messages log files.
Resolving The Problem
Use the following command to keep less messages file on the appliance:
support logrotate [agg|message] [daily|weekly|monthly] [# of rotations]
For example:
support logrotate message daily 3
If the above amendments still don't resolve large message files and you wish to rotate more often than daily - then please engage IBM Guardium Technical Support via a PMR.
IBM Guardium Technical Support
If a customer has problems with using the daily rotate (ie messages files are still filling the appliance) then please see the Internal Reference for this document using the IBM Internal tooling for a potential method for further reducing the messages file(s)
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg21665455