wtmp,store.log and access.log - Unix

This is a discussion on wtmp,store.log and access.log - Unix ; In one of my AIX 5.1 server /var is getting full in every three days...these files are getting full wtmp,store.log and access.log I added 1GB but of no use...they get filled up very quickly...can someone please tell me why this ...

+ Reply to Thread
Results 1 to 4 of 4

Thread: wtmp,store.log and access.log

  1. wtmp,store.log and access.log

    In one of my AIX 5.1 server /var is getting full in every three
    days...these files are getting full wtmp,store.log and access.log

    I added 1GB but of no use...they get filled up very quickly...can
    someone please tell me why this problem comes and its solution...


    Thanks in Advance...

  2. Re: wtmp,store.log and access.log

    In article
    <4d4b6ff4-10b4-487f-bd93-f6e7c0b2f890@e6g2000prf.googlegroups.com>,
    "vaitheeshkanna@gmail.com" wrote:

    > In one of my AIX 5.1 server /var is getting full in every three
    > days...these files are getting full wtmp,store.log and access.log
    >
    > I added 1GB but of no use...they get filled up very quickly...can
    > someone please tell me why this problem comes and its solution...


    My guess is that you have users running scripts that automatically login
    to the machine, do something, and logout, and they run these scripts
    very frequently. wtmp is a record of all the recent logins and logouts
    (it's what the "last" command reads from). You should be able to read
    store.log and access.log to see what they're reporting.

    --
    Barry Margolin, barmar@alum.mit.edu
    Arlington, MA
    *** PLEASE don't copy me on replies, I'll read them in the group ***

  3. Re: wtmp,store.log and access.log

    "vaitheeshka...@gmail.com" wrote:
    >
    > In one of my AIX 5.1 server /var is getting full in every three
    > days...these files are getting full wtmp,store.log and access.log
    >
    > I added 1GB but of no use...they get filled up very quickly...can
    > someone please tell me why this problem comes and its solution...


    Both of the files are probably kept open by the utility writing to
    them.
    If you try to delete them read up on why open files deleted do not
    free up their blocks until the program exits.

    Check what daemon writes to them (apache?). Check if that
    daemon knows how to close all of its files and re-read its config
    if it gets a kill -HUP. Then write a script that move store.log to
    store.log.0, touches restore.log, and does a kill -HUP on the
    daemon. Check out how /var/adm/messages works on several
    versions of UNIX and mimic that.

    The man page for utmp explains wtmp.

  4. Re: wtmp,store.log and access.log

    vaitheeshkanna@gmail.com wrote:
    > In one of my AIX 5.1 server /var is getting full in every three
    > days...these files are getting full wtmp,store.log and access.log
    >
    > I added 1GB but of no use...they get filled up very quickly...can
    > someone please tell me why this problem comes and its solution...
    >
    >


    fuser logfile

    finds out which process needs to be informed/restarted when logfile
    is deleted/truncated.

    Apache has an own method on rotating its log files - you best use that.

    wtmp can be used by many process, but is opened only for short times.
    Check its contents with the "last" command.
    If you do not need the information.
    then you can empty it with a cron job, e.g.
    0 20 1 * * >/var/adm/wtmp


    --
    Michael Tosch @ hp : com

+ Reply to Thread