Questions: Disk Full Root - Services Down

• What is consuming the most space on the root partition?
• Are old log files, core dumps, or temp files the primary culprit?
• Is log rotation configured and working correctly?
• Has a process been writing excessively (application debug logging left on, audit logs, etc.)?
• Are there deleted files still held open by running processes (showing in lsof)?
• Is the inode count also exhausted, or just block space?
• What services need to be restarted after freeing space?
• Are there old kernel images or package cache files that can be safely cleaned?
• Could this be caused by a failed log rotation or a misconfigured application?
• What monitoring and alerting should be improved to catch this earlier?