How to resume audit suspending logging.
Issue
- Audit daemon gives the following messages in /var/log/messages and stops logging into /var/log/audit/audit.log.
localhost auditd[590]: Audit daemon is low on disk space for logging
localhost auditd[590]: Audit daemon is suspending logging due to low disk space.
Environment
- Red Hat Enterprise Linux 7
- Audit
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
