Forum Discussion

Harsha_NK's avatar
Harsha_NK
Icon for Nimbostratus rankNimbostratus
Jun 10, 2024

/var directory Filling up

Hi Everyone,

Recently my /var directory in LTM is getting filled up and currently at 86%. Most of the space is occupied by arg_ex_out file ( Around 3Gigs ). Wanted to know if i can remove the contents of the file and if it causes any impact. It seems to be increasing 20MB/day

-rw-r--r--.   1 root  root  3242619992 Jun 10 13:39 arg_ex_out

Any Help would be appreciated.

arg_ex_out
  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Jun 11, 2024

    there are two K articles on this suggesting they come from external monitors

    this one explains how to deal with it: https://my.f5.com/manage/s/article/K14484554

    • cloudops_network's avatar
      cloudops_network
      Icon for Nimbostratus rankNimbostratus
      Jun 12, 2024

      Yeah, F5 Engineers suggested this option and another engineer suggested the below 

             To remove:
      a. Login to BIGIP CLI.
      b. Enter command
      bash
      cd /var/log
      rm arg_ex_out

      But before following any of these steps , we wanted to make sure that removing this log file would not cause any impact or outage

      • boneyard's avatar
        boneyard
        Icon for MVP rankMVP
        Jun 30, 2024

        have you tried this by now? if so can you share the result.

         

        if you are still waiting i would say contact the F5 engineers (support) about this to be sure.

  • c_fletcher's avatar
    c_fletcher
    Icon for Altostratus rankAltostratus
    Jun 10, 2024

    Are the contents log entries, can you figure out what is writing to that file based on the contents? If not you can use the lsof command from the bash shell to determine what process is writing to that file.

    • Harsha_NK's avatar
      Harsha_NK
      Icon for Nimbostratus rankNimbostratus
      Jun 10, 2024

      From the Contents of the arg file i can see the below.

      ---- Command Line Args ----
      443
      ---- Environment Args ----
      ARGS_I=
      HOST=sts.sainsburys.co.uk
      INST_ID=190
      MON_INST_LOG_NAME=/var/log/monitors/Prod_EDMZ_MN_ADFS01-prdedz-dc3-SNI-Prod_EDMZ_prodwin2507.bc.jsplc.net-443.log
      MON_TMPL_NAME=/Prod_EDMZ/MN_ADFS01-prdedz-dc3-SNI
      NODE_PORT=443
      PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/contrib/bin:/usr/local/bin:/usr/contrib/sbin:/usr/local/sbin:/usr/libexec
      PROBE_TIMEOUT=91
      RECV=200 OK
      RUN_I=/Common/arg_example
      SECURITY_COMMONCRITERIA=false
      SECURITY_FIPS140_COMPLIANCE=false
      TMOS_RD=168
      URI=/adfs/ls/idpinitiatedsignon.aspx
      ---- End Args ----

      And the same logs continue for the url sts.sainsburys.co.uk in the file.