Koozali.org: home of the SME Server

Obsolete Releases => SME Server 6.x => Topic started by: exocet on April 26, 2006, 11:15:50 AM

Title: logrotate 98% CPU
Post by: exocet on April 26, 2006, 11:15:50 AM

Help needed.

Logrotate takes 98% of CPU

What can I do?

Thanks

Title: logrotate 98% CPU
Post by: exocet on April 26, 2006, 01:09:06 PM

managed to kill the process with "top".
How/where can I see what caused the problem?

thanks

Title: logrotate 98% CPU
Post by: marsa_matruh on April 26, 2006, 02:34:30 PM

Logfiles size should be to large. Something should be broken in your server and must overfill one of your logfile. Have a look in your logfiles.

Title: logrotate 98% CPU
Post by: exocet on April 26, 2006, 04:59:37 PM

thanks marsa
had a few days back some problems with an update for snort.
opening the logs from snort takes a while but is possible with mc...
can/may i just delete ALL the snort logs?

not sure snort logs are the problem, but the first gess...

ps I didn't delete any logs since 2003....

Title: logrotate 98% CPU
Post by: marsa_matruh on April 26, 2006, 05:39:46 PM

First, be sure that the problem with snort is solved, i.e. it does not overfill your logfile. Then, may be, you can delete the big snort logfile(s). Are they all big or only the recent one?

Title: logrotate 98% CPU
Post by: exocet on April 26, 2006, 06:21:40 PM

the snort map is 32Mb, there a have logs alert.log.1.gz.1.gz.2........
when i try to delete them, the console stops...
last message is from 20 april

i also have messages in var/log/ from 1170Mb which i can remove.
the larger messages are about snort