[SOLVED] Help, huuge /var/log/syslog 70GB+ OMG

hottdogg · 02-15-2014, 06:15 PM

MY slackware 14.1 has 76GB in size of a /var/log/syslog and I am the only user,fresh install about 1.5 months ago.
Something is very wrong.

So, I checked:

Code:

tail -n 40000 /var/log/syslog

Got lot of these:

Code:

Feb  3 15:25:58 stockholm kernel: [13643.369874] mei_me 0000:00:16.0: unexpected reset: dev_state = RESETTING
Feb  3 15:25:58 stockholm kernel: [13643.369887] mei_me 0000:00:16.0: reset: unexpected enumeration response hbm.
Feb  3 15:25:58 stockholm kernel: [13643.369890] mei_me 0000:00:16.0: unexpected reset: dev_state = RESETTING
Feb  3 15:25:58 stockholm kernel: [13643.369928] mei_me 0000:00:16.0: reset: wrong host start response
Feb  3 15:25:58 stockholm kernel: [13643.369931] mei_me 0000:00:16.0: unexpected reset: dev_state = RESETTING
Feb  3 15:25:58 stockholm kernel: [13643.369945] mei_me 0000:00:16.0: reset: unexpected enumeration response hbm.
Feb  3 15:25:58 stockholm kernel: [13643.369948] mei_me 0000:00:16.0: unexpected reset: dev_state = RESETTING
Feb  3 15:25:58 stockholm kernel: [13643.369966] mei_me 0000:00:16.0: reset: wrong host start response

IIRC,at that date, my laptop slept after I had left out and didn't want to wake up when I got back,
I had to hard reset my laptop, IIRC.

Any advice?
Is it save to erase /var/log/syslog? It's 76GB it's ridiculous.

genss · 02-15-2014, 06:29 PM

seems like mei_me driver module has problems after suspend/resume

from what i found out its something for intel chipsets

first
rmmod mei_me

check stuff, if everything works then add "blacklist mei_me" to /lib/modprobe.d/blacklist.conf

and you can delete it, its a log of system events
in case something fails you can usually check there

syg00 · 02-15-2014, 06:42 PM

Don't delete it - too many potential problems with permissions/ownership. If there's nothing in it you care about, merely use

Code:

> /var/log/syslog

Better would be to use logrotate to manage this.

Richard Cranium · 02-15-2014, 06:55 PM

If you've done a full install, the logrotate package should rotate those files every day at 04:40 am.

hottdogg · 05-02-2014, 11:46 PM

Quote:

Originally Posted by syg00

Don't delete it - too many potential problems with permissions/ownership. If there's nothing in it you care about, merely use

Code:

> /var/log/syslog

Better would be to use logrotate to manage this.

Ok,tried > /var/log/syslog no prob so far. Tnx.

@genss, Tnx for the tip, I will keep this is mind, too lazy to do it for now