Koozali.org: home of the SME Server

logrotate 98% CPU

exocet

logrotate 98% CPU
« on: April 26, 2006, 11:15:50 AM »
Help needed.

Logrotate takes 98% of CPU

What can I do?

Thanks

exocet

logrotate 98% CPU
« Reply #1 on: April 26, 2006, 01:09:06 PM »
managed to kill the process with "top".
How/where can I see what caused the problem?

thanks

Offline marsa_matruh

  • ****
  • 249
  • +0/-0
logrotate 98% CPU
« Reply #2 on: April 26, 2006, 02:34:30 PM »
Logfiles size should be to large. Something should be broken in your server and must overfill one of your logfile. Have a look in your logfiles.

exocet

logrotate 98% CPU
« Reply #3 on: April 26, 2006, 04:59:37 PM »
thanks marsa
had a few days back some problems with an update for snort.
opening the logs from snort takes a while but is possible with mc...
can/may i just delete ALL the snort logs?

not sure snort logs are the problem, but the first gess...

ps I didn't delete any logs since 2003....

Offline marsa_matruh

  • ****
  • 249
  • +0/-0
logrotate 98% CPU
« Reply #4 on: April 26, 2006, 05:39:46 PM »
First, be sure that the problem with snort is solved, i.e. it does not overfill your logfile. Then, may be, you can delete the big snort logfile(s). Are they all big or only the recent one?

exocet

logrotate 98% CPU
« Reply #5 on: April 26, 2006, 06:21:40 PM »
the snort map is 32Mb, there a have logs alert.log.1.gz.1.gz.2........
when i try to delete them, the console stops...
last message is from 20 april

i also have messages in var/log/ from 1170Mb which i can remove.
the larger messages are about snort