ESG /var/log 100% full

[vJamesR]

I'm seeing some poor performance and alerts generated by an ESG device (v.6.3.2), logging in to the console shows a very full disk:

/dev/sda4     32M     100%     /var/log

It's really struggling to show logs, but from what I've seen it's had loads of failed SSH authentications (just flashed by quickly before the console became unresponsive)

Is there anyway to clear this down and make sure it doesn't just refill immediately? Very new to NSX so apologies if I'm missing something obvious!

Thanks - James

[amolnjadhav]

Hi James,

    I have not seen such issue in Production/Test environment.

    1. Do you have any solution/any_monitoring tool deployed which trying to connect to ESG?

    2. I can think of temporary workaround for this problem is to configure syslog server outside and provide syslog IP inside ESG to dump the logs to the syslog server. In a way it won't hamper your ESG disk space.

[Sreec]

There were few known issues in the past both in VCNS/NSX . Recent one which i found for NSX edge was https://kb.vmware.com/s/article/2146405?language=en_US  . First and foremost ensure there are no advanced logging enabled on Edges. If everything is fine,you may try redeploying the edge. Ideally that should clear space in few scenarios.