How to resume audit suspending logging.

Solution Verified - Updated -

Issue

  • Audit daemon gives the following messages in /var/log/messages and stops logging into /var/log/audit/audit.log.
localhost auditd[590]: Audit daemon is low on disk space for logging
localhost auditd[590]: Audit daemon is suspending logging due to low disk space.

Environment

  • Red Hat Enterprise Linux 7
  • Audit

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In