Symptoms:

The /storage/log partition gets full on one or more VMware Aria Operations 8.x node and these log files are consuming this space:
/var/log/auth.log
/var/log/messages
/var/log/warn

This is caused by the move to Photon OS and an incorrect log rotation mechanism in vRealize Operations 8.x

Resolution:

To resolve this issue remove the /var/log/warn, /var/log/auth.log, and /var/log/messages files.

  1. Log into the VMware Aria Operations 8.x node as root via SSH or Console, pressing ALT+F1 in a Console to log in.
  2. Run the following command to stop the syslog service:

service syslog stop

  1. Remove the /var/log/warn, /var/log/auth.log, and /var/log/messages files by running this command:

​rm -f /var/log/warn* /var/log/auth.log* /var/log/messages*

  1. Run the following command to start the syslog service:

service syslog start