Hi guys,
I got help and had discovered that due to audit in the system:
Feb 10 13:16:20 iasaix audbin[3792]: threshold 20.00 exceeded for filesystem /var/log/audit.d/. - free blocks down to 17.07%
Feb 10 13:16:20 iasaix auditd[3790]: Notify command /usr/sbin/audbin -S /var/log/audit.d/save.%u -C -T 20% exited with status 1
/var becomes less than the 20% threshold, the system goes to suspend mode.
checking the chkconfig / df output
$ grep var df
/dev/sda3 10080520 8270560 1297892 87% /var
I believe the /var is quickly approching to 100% as the system gets tons of "query (cache) denied" from named(DNS).
By disabling the audit service, the system seems to functioning properly now.
Now I have another question if there is anything I should take note of after disabling the audit service? Any advise is appreciated. Thanks. :-)
Regards,
Cher Kian
|