I've noticed that free disk space has become smaller for some reasons. The graphs show that in about 15 minutes the disk was a quarter full. Can I find out who write this huge amount of data to the disk?
Asked
Active
Viewed 25 times
0
-
Maybe. Generally looking at what happened in the past requires that you set up detailed auditing/monitoring beforehand. Tools like `iotop` allow you to easily see which processes are currently generating the most IO. Finding disk hogs will find the UID (owner) and/or a location assigned to a designated process https://serverfault.com/a/1110248/984089 if/when the disk space is still in use. A temp file that already got deleted, is really hard to trace. – diya Nov 07 '22 at 09:13