/var/log/messages is growing to about 3.5 GB in about 15 or 20 minutes and /var is getting filled quickly

Solution In Progress - Updated -

Issue

  • /var/log/messages is getting filled very quickly, messages is growing to 3.5G in 15-30 mins
  • /var/log/messages inflow rate is around 5000 lines per second.
Mar 24 04:11:18 by-swantst kernel: [1181906.464930] [25886(dsa.Scheduler_0)]: do_notify_by_path(e={id=3362958924,type=1},dentry={name=1661300_81b4befb-e90e-42c5-9005-3d3885ce1821.7z.etag},inode={ino=2871})
Mar 24 04:11:18 by-swantst kernel: [1181906.465131] [5619(sh)]: do_notify_by_path(e={id=3362958931,type=23},dentry={name=wc},inode={ino=33293})
Mar 24 04:11:18 by-swantst kernel: [1181906.465283] [5619(wc)]: do_notify_by_path(e={id=3362958932,type=1},dentry={name=ld.so.cache},inode={ino=167040})
Mar 24 04:11:18 by-swantst kernel: [1181906.465293] [5619(wc)]: do_notify_by_path(e={id=3362958935,type=8},dentry={name=ld.so.cache},inode={ino=167040})
Mar 24 04:11:18 by-swantst kernel: [1181906.465311] [5619(wc)]: do_notify_by_path(e={id=3362958936,type=1},dentry={name=libc-2.12.so},inode={ino=161281})
Mar 24 04:11:18 by-swantst kernel: [1181906.465333] [5619(wc)]: do_notify_by_path(e={id=3362958939,type=8},dentry={name=libc-2.12.so},inode={ino=161281})
....
<downsided output >

Environment

  • Red Hat Enterprise Linux
  • Trend Micro Deep Security Agent - dsa_filter, dsa_hook
    ds_agent-12.0.0-1546.el6.x86_64

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content