Disk partition var has only 0% free & snmpd process is constantly restarting, while running 14.1.4.6

[lttarvina]

• Disk partition var has only 0% free

011d0004:3: Disk partition /var/log (slot 1) has only 0% free

Broadcast message from ...@... (Tue Apr 18 14:21:01 2023):

011d0004:3: Disk partition /var/log (slot 1) has only 0% free

• The log events show the following in /var/log/ltm:

3 Aug 4 03:21:16 ... info snmp [32102]: 0114002b:6: HA daemon_heartbeat %snmpd enabled.

4 Aug 4 03:21:18 ... info snmp [32186]: 0114002b:6: HA daemon_heartbeat %snmpd enabled.

5 Aug 4 03:21:20 ... info snmp [32270]: 0114002b:6: HA daemon_heartbeat %snmpd enabled.

...

263 Mar 23 19:18:12 ... alert alerts [5462]: 01100045:1: /var/log disk usage exceeds 90%. Reduce log disk space now

264 Mar 23 19:18:12 ... err alertd [5462]: 01100047:3: Logcheck could not run logrotate

265 Mar 23 19:18:12 ... emerg alertd [5462]: 01100048:0: Log disk usage still higher than 80% after logrotate and 24 times log deletion

266 Mar 23 19:18:12 ... info snmp [5462]: 01100045:1: /var/log disk usage exceeds 90%. Reduce log disk space now

267 Mar 23 19:18:12 ... info snmp [5462]: 0114002b:6: HA daemon_heartbeat %snmpd enabled.

• The BIG-IP command line display a message similar to the following.

logger [20279]: Re-starting snmpd

Broadcast message from systemd-journald@ ... (Tue 2023-04-18 16:27:20 +08): 

logger [20364]: Re-starting snmpd

Broadcast message from systemd-journald@ ... (Tue 2023-04-18 16:27:22 +08): 

logger [20450]: Re-starting snmpd

Broadcast message from systemd-journald@ ... (Tue 2023-04-18 16:27:24 +08): 

logger [20537]: Re-starting snmpd

How can these problems be resolved? What causes these problems?

[Michael_Saleem]

It could be this:

Bug ID 777265: SNMPD logs are not included in the default set of files in logrotate

[lttarvina]

Hi Michael,

Good morning, and thank you so much for taking the time to respond to my question.

My question is, why do we need to modify the logrotate settings to add the snmpd.log? Will that free up the 0% free space of the disk partition var and remove the restarting snmpd issue?

Please specify the negative impact of the following modifications on our network and kindly explain what each command does.

tmsh modify sys log-rotate syslog-include "/var/log/snmpd.log {

    compress

    missingok

    notifempty

    postrotate

        killall -HUP snmpd 2>/dev/null || true

    endscript

}

[Michael_Saleem]

Hi,

The Bug ID link that I provided was just a *guess* of what the problem may be. I would recommend generating a QKview file and raising a Service Request with F5 to properly diagnose the issue.