PAM detected disk (/var/log) is full, IOS XR

[Sam Winters]

Hello everyone 

I have NCS 540 with 7.1.2 XR and now have logs full of these:

RP/0/RP0/CPU0:2022 Mar 15 09:11:22.394 SAMT: logger[66386]: %OS-SYSLOG-4-LOG_WARNING : PAM detected disk (/var/log) on 0_RP0_CPU0 is full! Please cleanup ASAP to avoid any fault caused by this.

RP/0/RP0/CPU0:2022 Mar 15 09:14:28.069 SAMT: resmon[265]: %HA-HA_WD-2-DISK_CRIT : A monitored device /var/log ( log:/ ) is above 99% utilization. Current utilization = 100. Please remove unwanted user files and configuration rollback points.

But in fact, i have free space in that dir:

469636 kbytes total (309356 kbytes free)

Is that a bug? Or anyone knows what's the solution? Please advise.

[marce1000]

            - FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvw29990

 M.

[Sam Winters]

Thank you! But i didn't quite catch the solution. Can you explain what exactly do i need to do to fix it? 

[marce1000]

 - Check if you have shell-like commands  on the device which may allow you to cleanup files in /var/log  yourself (choose older logs , if applicable). If you do not have this kind of direct access then you may have to involve TAC (raise a ticket). If cleaned , then upgrade to software version denoted in Known Fixed Releases.

 M.

[Sam Winters]

I can delete some files, but won't that affect the device? And could that be solved without upgrade, with reload, process restart or configuration commands? 

[marce1000]

      - Cleaning up /var/log even if completely done, will not affect the device.

 M.

[Sam Winters]

When i try to delete files, i recieve "Path outside filesystem disallowing access". I do that from admin mode. Maybe there is a specific command to allow me these actions? And again, can i fix that with some process restart or router reload?

[Sam Winters]

Up the topic. Please advise.