VCSA log full issue

[ngiengsk81]

We are using ESXI 6.0 with VCSA installed. Almost every three month, we unable to startup vcenter services due to the disk space full especially on this file /var/log/audit/audit.log. Normally I have to manually SSH to the server and delete this file before the disk full but I am unable to predict when the file is going to fully occupied the disk.

1. Is there a way to prevent this file from growing or fully occupied the disk space like retention policy?

2. Will upgrade to 6.5/6.7 prevent this kind of issue happen again?

3. Will increasing the hdd space able to solve this issue?

Thanks

[a_p_]

Did you already read https://kb.vmware.com/s/article/2149278​ to see whether this helps?

André

[daphnissov]

I also notice that /storage/log is quite full, and if you're on 6.0 U2 you could be hitting this issue as well (which was fixed in U3).

[ngiengsk81]

Hi daphnissov,

Currently we are using 6.0 U1 only. Will try to update it to U3 and see whether it solves our issue or not. Thanks.

[ngiengsk81]

Hi André,

Thanks for the KB and definitely will look into it.