Help answer threads with 0 replies.
Go Back > Forums > Linux Forums > Linux - Newbie
User Name
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!


  Search this Thread
Old 03-03-2014, 11:38 AM   #1
Registered: Apr 2012
Distribution: Ubuntu, SUSE, Redhat
Posts: 188

Rep: Reputation: Disabled
trying to find a process that is creating log files everyday

Hi all

I got this Fedora release 14 server running. And it has a process somewhere that creates a very large log file every day at 2:30am on the dot.

Let's call it application A. It will create the log file names with following format: A.time_stamp.cfg

and it's always in the same directory: home/userB/appA/

I would like to find this process and shut it off. ps -tree doesn't really help because there are too many unknown processes for me to rule out.

Lsof doesn't help, it shows me nothing for some reason. Even when I vi'ed the file and afterwards I ran lsof I get nothing back.

I would also like to find out where it is running from so I can see the execution script.

Does any have any clues about how I should proceed with this?

Old 03-03-2014, 11:44 AM   #2
Senior Member
Registered: Aug 2011
Location: Dublin
Distribution: Centos 5 / 6 / 7
Posts: 2,593

Rep: Reputation: 954Reputation: 954Reputation: 954Reputation: 954Reputation: 954Reputation: 954Reputation: 954Reputation: 954
look in the various folders /etc/crond.* you may find that cron.daily is set to run at 2:30am

Or look in the various users crontabs to see if they have anything scheduled to run at 2:30am.

The crontab of the "owner" of the created file may be a good start point.
Old 03-03-2014, 12:53 PM   #3
LQ Newbie
Registered: Nov 2003
Distribution: Centos 6.5/Fedora 19/Ubuntu 14.10
Posts: 13

Rep: Reputation: 4
@jzoudavy I'm guessing lsof only showed you files for the user that you ran it *as*. To see all files run it as root, you probably want to try something like:

lsof | grep "suspectusernamehere"

Further to TenTenth's good suggestions, depending on your distro you might find private cron entries in /var/spool/cron/(usernames)
1 members found this post helpful.
Old 03-03-2014, 12:57 PM   #4
Registered: Apr 2012
Distribution: Ubuntu, SUSE, Redhat
Posts: 188

Original Poster
Rep: Reputation: Disabled
hey guys

thanks for your help. I found the script that seems to be getting executed, but the weird thing is that it is not in any of the cron jobs. But fortunately the guy who wrote it signed it so I will talk to him and find more.

Thanks for the help


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
rsync - how to suppress counting files during --process to log output file ? masuch Linux - Newbie 1 09-16-2012 04:20 PM
[SOLVED] sorting of files and creating a loop to process them date wise umix Linux - Newbie 8 12-03-2011 05:12 AM
How to find the words in log files genROCK Linux - Newbie 9 10-19-2011 10:18 AM
Creating Multiple Log Files koacamper Linux - Newbie 3 09-24-2005 08:24 PM
User and Process Accounting Log Files lafinhyena Linux - Newbie 0 05-19-2004 04:57 AM > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 10:45 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration