Need some help in cleaning Nagios FIle Systems

[aiabbas]

I am a UNIX admin and have superficial knowledge of Nagios. The Nagios file system became full and I need to do some clean up.

Upon investigation, I found out some indices/logtash filling up the disk space.

15G /Nagios_bu/indices/logstash-2018.04.22/3
15G /Nagios_bu/indices/logstash-2018.04.22/2
15G /Nagios_bu/indices/logstash-2018.04.22/0
15G /Nagios_bu/indices/logstash-2018.04.22/1
15G /Nagios_bu/indices/logstash-2018.04.22/4
74G /Nagios_bu/indices/logstash-2018.04.22
17G /Nagios_bu/indices/logstash-2018.04.23/3
10G /Nagios_bu/indices/logstash-2018.04.23/2
4.4G /Nagios_bu/indices/logstash-2018.04.23/1
6.0G /Nagios_bu/indices/logstash-2018.04.23/4
38G /Nagios_bu/indices/logstash-2018.04.23
8.0G /Nagios_bu/indices/logstash-2018.04.25/3
9.5G /Nagios_bu/indices/logstash-2018.04.25/2
18G /Nagios_bu/indices/logstash-2018.04.25/0
18G /Nagios_bu/indices/logstash-2018.04.25/1
54G /Nagios_bu/indices/logstash-2018.04.25
8.3G /Nagios_bu/indices/logstash-2018.04.24/3
5.9G /Nagios_bu/indices/logstash-2018.04.24/1
9.5G /Nagios_bu/indices/logstash-2018.04.24/4
24G /Nagios_bu/indices/logstash-2018.04.24
187G /Nagios_bu/indices
4.0K /Nagios_bu/.ICE-unix
187G /Nagios_bu

Could someone give me an idea what is in these file systems; is it safe to delete them?

ANy help would be highly appreciated.

Regards,

Ali

[scottwilkerson]

This looks like it could be the path you set your backup repository to be to store archives of your logs.

Check Admin -> Snapshots & Maintenance

On the right hand side under Repositories, what is the shared path you set?

[cdienger]

Those would be the files that make up the database for the Nagios Log Server. Point your browser to http://nls_ip/nagioslogserver/reports/hosts to find a list of top hosts sending data. There may be specific hosts sending much of the data that can be reconfigured. Localhost may be one and you can disable it by moving /etc/rsyslog.d/nagioslogserver.conf and restarting the service:

mv /etc/rsyslog.d/nagioslogserver.conf ~
service rsyslog restart

You can also configure NLS to not keep as much data by setting maintenance settings under Admin > System > Snapshots & Maintenance.