Root partition on SDDC is full or almost full.
auth.log
and/or message
log are not rotating and filling up the root partition
VMware Cloud Foundation
To resolve the issue
vcf
user, login to root with the command su root
Note: - While copying the file to /etc/logrotate.d error may come as "Permission denied".
To fix this issue use any of the below mentioned method
Option #1 Send the syslog
file mention in the KB to /vcf/home
directory then move the file to /etc/logrotate.d
mv syslog
/etc/logrotate.d
Option#2 Copy the content of the of syslog
file and by using vi
editor paste the content in the current syslog
file
4. Update the permissions on the file.
chown root:root syslog
chmod 644 syslog
5. Initiate the log rotation
logrotate -f /etc/logrotate.conf
Important: If the root partition is full or messages log is over 1GB you should manually clear the messages log and auth.log prior to running this workaround.
echo > /var/log/messages
echo > /var/log/audit/audit.log
echo > /var/log/auth.log
While running the command logrotate -f /etc/logrotate.conf
if error came as: -
error: destination /var/log/audit/audit.log-20241203.gz already exists, skipping rotation
error: destination /var/log/nginx/access.log-20241203.gz already exists, skipping rotation
error: destination /var/log/nginx/error.log-20241203.gz already exists, skipping rotation
To resolve the issue manually removed the files from the directory then again try running logrotate -f /etc/logrotate.conf