NSX-T manager shows high disk usage on /var/log partition

Products

• VMware NSX

Issue/Introduction

Symptoms:

• Running NSX-T 2.5.x
• The NSX manager(s) shows high disk usage on /var/log/
• The /var/log/master-audit.log is very large over 700MB is size.

Environment

VMware NSX-T Data Center
VMware NSX-T Data Center 2.5.x

Cause

This file master-audit.log is used to collect and store all audit log files from all 3 manager nodes.
In certain circumstances this file can grow to be very large and causes these space issues.

Resolution

This issue is resolved in NSX-T 3.1.0 and onwards.
If you are unable to upgrade to resolve this issue, please contact VMware support and reference this KB.

Workaround:
If you wish to preserve this file copy it out of the manager, then run the following command to empty the file:

echo > /var/log/master-audit.log