Forum Discussion
drbyrd
Jan 27, 2016Nimbostratus
I found the problem after finding this DevCentral page. I had deleted monitor log files before stopping the "monitor logging" on a few nodes. Basically there were files I couldn't see that were still being written to.
I ran "lsof | grep deleted" to find the files, then I just started/stopped monitor logging for each of the affected nodes. That seemed to clear the unlinked files and I now have 97% free in var/log.