-2

I am working on Solaris 11, Now facing problem related to memory As my root is reached to 90%, I have deleted the audit file from /var/share/audit which is of 8GB after deleting the file, server doesn't free that memory . Why? How can free that memory (disk space) without reboot the server?

Cœur
  • 37,241
  • 25
  • 195
  • 267
Rahul B.
  • 1
  • 2

1 Answers1

1

Was the file you deleted named like 20170220123456.not_terminated.<hostname>? If so, probably the file handle is still held open by auditd. What does this command output:

pfiles $(pgrep auditd)

If it shows a file without a path it's probably the file you deleted. The easiest way to get rid of it would be by restarting auditd:

svcadm restart auditd
Daniel Werner
  • 26
  • 1