Skip to content

Symptoms

  • Monitoring alerts: root filesystem at 98% capacity on web-prod-03.
  • SSH sessions are sluggish and some commands fail with "No space left on device".
  • The web application returns 500 errors because it cannot write to its log file.
  • df -h shows /dev/sda1 at 98% used with only 1.2 GB free on a 100 GB disk.
  • /var/log is consuming 78 GB of space.
  • The primary offender appears to be the application log at /var/log/webapp/access.log.
  • Logrotate is configured but the access log has not been rotated in 45 days.