Jump to content
Welcome to our new Citrix community!
  • 0

XEN 8.2 /var/log/secure filling up with to 3GB every few weeks crashing hosts

David Nguyen1709155977


We recently moved from VMWare to XEN and its been working ok so far, but I have been getting alerts regarding the Control domain getting full. I do see that the /var/log/secure file is growing a very fast pace with all stunnel traffic logs. 


At first i just ignored it, but then my host crashed due to it. I currently  have a script that purges the secure file every time i get the alerts which has been monthly for some XEN hosts. Although this seems likes it logging too much? has anyone every seen this grow to such a large size? This does not happen on all m y hosts at all sites which is strange. We are 8.2 and updated to E017.  Thanks






Link to comment

8 answers to this question

Recommended Posts

  • 0

We did open a case with Citrix, they had me try option "B"  that did work on some hosts. But not all hosts. We ended up doing opiton "A" and just limiting the logging.



1) Edited file /etc/rsyslog.d/xenserver.conf and comment below line

authpriv.warning                                             -/var/log/secure



1) Put the host into maintenance mode if HA is enabled.
2) Run command "> secure"
3) Run command "xe-toolstack-restart"
4) Run command "logrotate -f -v /etc/logrotate.conf"
5) Run command "logrotate -f -v /etc/logrotate-xenserver.conf"
6) Run command "systemctl restart rsyslog.service"
7) Repeat step 3


Now, i'm seeing my xensource.log getting filled up. 

Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...