Nagios Support Forum

Posted: **Thu Nov 04, 2021 3:44 pm**

We noticed /usr/local/nagiosxi/var/components/auditlog.log is eating up a lot of disk.

1. Can size/rotation be managed within XI or should logrotate be setup on the auditlog.log?
2. Any harm in deleting the auditlog.log while Nagios is running in situations where the server is running out of diskspace?

Please advise,

Posted: **Fri Nov 05, 2021 11:49 am**

1. It would need to be setup with logrotate, you could throw something like this into /etc/logrotate.d:
- Adjust per your requirements

Code: Select all

/usr/local/nagiosxi/var/components/auditlog.log {
    missingok
    notifempty
    size 1024M
    create 0660 apache nagios
    su apache nagios
    rotate 1
    compress
}

2. No harm, you can truncate it with the command below at any time if you need, it will just remove the auditlog.log entries, the DB Audit Log entries (that Admin > Audit Log uses) should still be retained based on the retention settings in Admin > Performance Settings > Databases > Max Audit Log Age.

Code: Select all

>/usr/local/nagiosxi/var/components/auditlog.log

Nagios Support Forum

auditlog.log managment

auditlog.log managment

Re: auditlog.log managment