MDV audit volume is growing rapidly
Applies to
- ONTAP 9
- NAS auditing
Issue
- MDV audit volume is unusually large and/or is growing rapidly
-
::> vol show MDV* Vserver Volume Aggregate State Type Size Available Used% --------- ------------ ------------ ---------- ---- ---------- ---------- ----- svm1 MDV_aud_eee aggr1 online RW 15GB 2.79GB 80%
-
- New audit logs are not being created in the log destination path
- EMS frequently warns that audit volume is full or nearly full
-
Sat Feb 01 10:31:21 +0000 [node-1: wafl_spcd_main: monitor.volume.nearlyFull:error]: Volume MDV_aud_eee@vserver:ddd is nearly full (using or reserving 95%% of space and 0%% of inodes). Sat Feb 01 10:37:51 +0000 [node-1: wafl_spcd_main: monitor.volumes.one.ok:debug]: Volume MDV_aud_eee@vserver:ddd is OK. Sat Feb 01 11:02:11 +0000 [node-1: wafl_spcd_main: monitor.volume.nearlyFull:error]: Volume MDV_aud_eee@vserver:ddd is nearly full (using or reserving 95%% of space and 0%% of inodes). Sat Feb 01 12:16:06 +0000 [node-1: wafl_spcd_main: monitor.volume.full:debug]: Volume MDV_aud_eee@vserver:ddd is full (using or reserving 98% of space and 0% of inodes). Sat Feb 01 13:28:24 +0000 [node-1: wafl_exempt06: wafl.vol.full:alert]: Insufficient space on volume MDV_aud_eee@vserver:ddd to perform operation. 4.00KB was requested but only 1.00KB was available. Sat Feb 01 13:28:24 +0000 [node-1: AuditWorkerThread03: a.b.nospace:EMERGENCY]: Audit subsystem internal error: Staging volume MDV_aud_eee is full.
-