Well deleting the faillog file hasn't cleared much space. But I tarred two log files that weren't compressed on the last rotate, messages and warn, 2.8GB each, to a bz2 that freed up 5GB.
I still need to get the /storage/db partition down though as it's only showing 2.8MB available.
I'm finding /var/log/ldapmessages filling up with this every 20-30 seconds:
Jul 15 16:32:20 vlevcenter01 slapd[4055]: conn=1002 op=1137 SRCH base="ou=Privileges,dc=virtualcenter,dc=vmware,dc=int" scope=1 deref=0 filter="(objectClass=*)"
Jul 15 16:32:20 vlevcenter01 slapd[4055]: conn=1002 op=1137 SRCH attr=cn vmw-vc-PrivIsOnParent vmw-vc-PrivGroup isDeleted modifyTimestamp entryUUID lastKnownParent
Jul 15 16:32:20 vlevcenter01 slapd[4055]: conn=1002 op=1137 SEARCH RESULT tag=101 err=0 nentries=246 text=
Jul 15 16:32:20 vlevcenter01 slapd[4055]: conn=1002 op=1138 SRCH base="ou=UserRoles,dc=virtualcenter,dc=vmware,dc=int" scope=1 deref=0 filter="(objectClass=*)"
Jul 15 16:32:20 vlevcenter01 slapd[4055]: conn=1002 op=1138 SRCH attr=cn vmw-vc-RoleName vmw-vc-PrivilegeList isDeleted modifyTimestamp entryUUID lastKnownParent
Jul 15 16:32:20 vlevcenter01 slapd[4055]: conn=1002 op=1138 SEARCH RESULT tag=101 err=0 nentries=6 text=
Jul 15 16:32:20 vlevcenter01 slapd[4055]: conn=1002 op=1139 SRCH base="ou=Licenses,ou=Licensing,dc=virtualcenter,dc=vmware,dc=int" scope=1 deref=0 filter="(objectClass=*)"
Jul 15 16:32:20 vlevcenter01 slapd[4055]: conn=1002 op=1139 SRCH attr=cn revision isDeleted modifyTimestamp entryUUID lastKnownParent
Jul 15 16:32:20 vlevcenter01 slapd[4055]: conn=1002 op=1139 SEARCH RESULT tag=101 err=0 nentries=128 text=
Jul 15 16:32:20 vlevcenter01 slapd[4055]: conn=1002 op=1140 SRCH base="ou=LicenseEntities,ou=Licensing,dc=virtualcenter,dc=vmware,dc=int" scope=1 deref=0 filter="(objectClass=*)"
Jul 15 16:32:20 vlevcenter01 slapd[4055]: conn=1002 op=1140 SRCH attr=cn revision isDeleted modifyTimestamp entryUUID lastKnownParent
Jul 15 16:32:20 vlevcenter01 slapd[4055]: conn=1002 op=1140 SEARCH RESULT tag=101 err=0 nentries=3 text=
Jul 15 16:32:20 vlevcenter01 slapd[4055]: conn=1002 op=1141 SRCH base="ou=Licenses,ou=Licensing,dc=virtualcenter,dc=vmware,dc=int" scope=1 deref=0 filter="(objectClass=*)"
Jul 15 16:32:20 vlevcenter01 slapd[4055]: conn=1002 op=1141 SRCH attr=vmw-vc-LicenseFileName cn vmw-vc-LicenseFileContent objectClass isDeleted modifyTimestamp entryUUID lastKnownParent
Jul 15 16:32:20 vlevcenter01 slapd[4055]: conn=1002 op=1141 SEARCH RESULT tag=101 err=0 nentries=128 text=
If there's some sort of auth problem then that might explain the massive faillog... even though the faillog didn't appear to be that big after all as it didn't release the space.
Anyone got any idea what's going on here as this is driving me insane.
Cheers, B