Forum Discussion

Harsha_NK's avatar
Harsha_NK
Icon for Nimbostratus rankNimbostratus
Jun 10, 2024

/var directory Filling up

Hi Everyone,

Recently my /var directory in LTM is getting filled up and currently at 86%. Most of the space is occupied by arg_ex_out file ( Around 3Gigs ). Wanted to know if i can remove the contents of the file and if it causes any impact. It seems to be increasing 20MB/day

-rw-r--r--.   1 root  root  3242619992 Jun 10 13:39 arg_ex_out

Any Help would be appreciated.

4 Replies

  • there are two K articles on this suggesting they come from external monitors

    this one explains how to deal with it: https://my.f5.com/manage/s/article/K14484554

    • cloudops_network's avatar
      cloudops_network
      Icon for Nimbostratus rankNimbostratus

      Yeah, F5 Engineers suggested this option and another engineer suggested the below 

             To remove:
      a. Login to BIGIP CLI.
      b. Enter command
      bash
      cd /var/log
      rm arg_ex_out

      But before following any of these steps , we wanted to make sure that removing this log file would not cause any impact or outage

  • Are the contents log entries, can you figure out what is writing to that file based on the contents? If not you can use the lsof command from the bash shell to determine what process is writing to that file.

    • Harsha_NK's avatar
      Harsha_NK
      Icon for Nimbostratus rankNimbostratus

      From the Contents of the arg file i can see the below.

      ---- Command Line Args ----
      443
      ---- Environment Args ----
      ARGS_I=
      HOST=sts.sainsburys.co.uk
      INST_ID=190
      MON_INST_LOG_NAME=/var/log/monitors/Prod_EDMZ_MN_ADFS01-prdedz-dc3-SNI-Prod_EDMZ_prodwin2507.bc.jsplc.net-443.log
      MON_TMPL_NAME=/Prod_EDMZ/MN_ADFS01-prdedz-dc3-SNI
      NODE_PORT=443
      PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/contrib/bin:/usr/local/bin:/usr/contrib/sbin:/usr/local/sbin:/usr/libexec
      PROBE_TIMEOUT=91
      RECV=200 OK
      RUN_I=/Common/arg_example
      SECURITY_COMMONCRITERIA=false
      SECURITY_FIPS140_COMPLIANCE=false
      TMOS_RD=168
      URI=/adfs/ls/idpinitiatedsignon.aspx
      ---- End Args ----

      And the same logs continue for the url sts.sainsburys.co.uk in the file.