Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I removed it and touched an empty verison a few weeks ago and noticed a big upswing in performance for my server. The file was 400+ MB. I've been keeping an eye on it since and I'm noticing it is growing fairly quickly. I tailed the file and I'm seeing a lot of "TTYXXLOGIN" entries. Should I be concerned? Is there a way to minimize it's logging? Should I logrotate it and forget about it?

Thanks in advance.

share|improve this question

First of I all think you need to understand that /var/run/utmp is not a log file (otherwise it would have been in /var/log). It is a file used by the system to store information about the current use of the machine. Its content is normally managed by the applications using the file.

Perhaps it would be a good idea if you looked into what is actually causing all those entries in the file to be made in the first place? Do you perhaps have programs performing logins without proper exits when done?

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.