Symptoms:
The /storage/log partition gets full on one or more VMware Aria Operations 8.x node and these log files are consuming this space:
/var/log/auth.log
/var/log/messages
/var/log/warn
This is caused by the move to Photon OS and an incorrect log rotation mechanism in vRealize Operations 8.x
Resolution:
To resolve this issue remove the /var/log/warn, /var/log/auth.log, and /var/log/messages files.
- Log into the VMware Aria Operations 8.x node as root via SSH or Console, pressing ALT+F1 in a Console to log in.
- Run the following command to stop the syslog service:
service syslog stop
- Remove the /var/log/warn, /var/log/auth.log, and /var/log/messages files by running this command:
rm -f /var/log/warn* /var/log/auth.log* /var/log/messages*
- Run the following command to start the syslog service:
service syslog start