Can I Remove Files In /var/log/journal And /var/cache/abrt-di/usr?
Answer :
journal logs
Yes you can delete everything inside of /var/log/journal/*
but do not delete the directory itself. You can also query journalctl
to find out how much disk space it's consuming:
$ journalctl --disk-usage Journals take up 3.8G on disk.
You can control the size of this directory using this parameter in your /etc/systemd/journald.conf
:
SystemMaxUse=50M
You can force a log rotation:
$ sudo systemctl kill --kill-who=main --signal=SIGUSR2 systemd-journald.service
NOTE: You might need to restart the logging service to force a log rotation, if the above signaling method does not do it. You can restart the service like so:
$ sudo systemctl restart systemd-journald.service
abrt logs
These files too under /var/cache/abrt-di/*
can be deleted as well. The size of the log files here is controlled under:
$ grep -i size /etc/abrt/abrt.conf # Max size for crash storage [MiB] or 0 for unlimited MaxCrashReportsSize = 1000
You can control the max size of /var/cache/abrt-di
by changing the following in file, /etc/abrt/plugins/CCpp.conf
:
DebugInfoCacheMB = 2000
NOTE: If not defined DebugInfoCacheMB
defaults to 4000 (4GB).
References
- Is it safe to delete /var/log/journal log files?
- Surprising behaviour when out of disk space
- 19.4. Generating Backtraces
Yes, the files from /var/log/journal
directory can be removed.
The most nice method I've found is:
journalctl --vacuum-size=500M
which deletes old log-files from /var/log/journal
until total size of the directory becomes under specified threshold (500 megabytes in this example).
You can also clean based on time: journalctl --vacuum-time=10d
# du -sh /var/log/journal 113M /var/log/journal # journalctl --vacuum-time=10d Deleted archived journal /var/log/journal/f77f9567bb70f8e7b5d9a0c95bef5c2a/system@36170b4530af4c89ac4d84ac68f8b727-0000000000000001-00057b09da23eb2c.journal (8.0M). Deleted archived journal /var/log/journal/f77f9567bb70f8e7b5d9a0c95bef5c2a/user-1000@54176301a0c74c4698c3b6a549e1b2ed-0000000000000874-00057b0c1a491094.journal (8.0M). . . . Deleted archived journal /var/log/journal/f77f9567bb70f8e7b5d9a0c95bef5c2a/user-1000@e6ecd2f858d1498b9a445af7bac00bbf-000000000000063a-0005848ac99802b3.journal (8.0M). Vacuuming done, freed 88.0M of archived journals from /var/log/journal/f77f9567bb70f8e7b5d9a0c95bef5c2a. root@monroe:/var/log# du -sh /var/log/journal 25M /var/log/journal
Comments
Post a Comment