I have a RHEL 5 server that recently ran out of disk space and now our Logwatch for the server reports the following disk usage (I think this is the last accurate night before the /var partition filled up):
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/VolGroup00-LogVol00
62G 3.8G 55G 7% /
/dev/mapper/VolGroup01-LogVol00
198G 185G 2.8G 99% /var
/dev/cciss/c0d0p1 99M 24M 70M 26% /boot
If I log into the server and run df -h manually I get the following result:
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/VolGroup00-LogVol00
62G 14G 46G 23% /
/dev/mapper/VolGroup01-LogVol00
198G 174G 14G 93% /var
/dev/cciss/c0d0p1 99M 24M 70M 26% /boot
I checked /usr/share/logwatch/default.conf/logwatch.conf
and found that the temp directory is /var/cache/logwatch
but that directory contains no items. Does anyone know what would cause logwatch to display stale data like this?