linux删除文件后不释放磁盘的问题
1. 用df 检查发现根目录可用空间越为200M
# df -h
Filesystem Size Used Avail Use% Mounted on
/dev/xvde1 .9G .4G 232M % /
none .4G 16K .4G % /dev/shm
2. 用du命令查看根目录各子目录占用空间,可以发现6G的空间莫名其妙地丢了
# du -sm /* | sort -nr | head
1755 /usr
664 /var
538 /lib
331 /opt
104 /boot
31 /etc
23 /lib64
14 /sbin
9 /bin
3. 用lsof命令查看有很多处于deleted状态的进程
# lsof | grep delete
cbdaemon root 5w REG , /var/log/cb/sensor/cbdaemon.ec2s-usercassandra-.invalid-user.log.ERROR.-143157.993 (deleted)
salt-mini root 0r REG , /tmp/sh-thd- (deleted)
salt-mini root 6w REG , /var/log/salt/minion- (deleted)
salt-mini root 0r REG , /tmp/sh-thd- (deleted)
salt-mini root 6w REG , /var/log/salt/minion- (deleted)
filebeat root 10r REG , /var/log/audit/audit.log. (deleted)
filebeat root 12r REG , /var/log/audit/audit.log. (deleted)
filebeat root 14r REG , /var/log/audit/audit.log. (deleted)
filebeat root 15r REG , /var/log/audit/audit.log. (deleted)
filebeat root 16r REG , /var/log/audit/audit.log. (deleted)
filebeat root 17r REG , /var/log/audit/audit.log. (deleted)
filebeat root 18r REG , /var/log/audit/audit.log. (deleted)
filebeat root 19r REG , /var/log/audit/audit.log. (deleted)
filebeat root 20r REG , /var/log/audit/audit.log. (deleted)
filebeat root 21r REG , /var/log/audit/audit.log. (deleted)
filebeat root 22r REG , /var/log/audit/audit.log. (deleted)
filebeat root 23r REG , /var/log/audit/audit.log. (deleted)
filebeat root 24r REG , /var/log/audit/audit.log. (deleted)
filebeat root 25r REG , /var/log/audit/audit.log. (deleted)
filebeat root 26r REG , /var/log/audit/audit.log. (deleted)
filebeat root 27r REG , /var/log/audit/audit.log. (deleted)
filebeat root 28r REG , /var/log/audit/audit.log. (deleted)
filebeat root 30r REG , /var/log/audit/audit.log. (deleted)
filebeat root 31r REG , /var/log/audit/audit.log. (deleted)
filebeat root 32r REG , /var/log/audit/audit.log. (deleted)
filebeat root 33r REG , /var/log/audit/audit.log. (deleted)
filebeat root 34r REG , /var/log/audit/audit.log. (deleted)
filebeat root 35r REG , /var/log/audit/audit.log. (deleted)
filebeat root 36r REG , /var/log/audit/audit.log. (deleted)
filebeat root 37r REG , /var/log/audit/audit.log. (deleted)
filebeat root 38r REG , /var/log/audit/audit.log. (deleted)
filebeat root 39r REG , /var/log/audit/audit.log. (deleted)
filebeat root 40r REG , /var/log/audit/audit.log. (deleted)
filebeat root 41r REG , /var/log/audit/audit.log. (deleted)
filebeat root 42r REG , /var/log/audit/audit.log. (deleted)
filebeat root 43r REG , /var/log/audit/audit.log. (deleted)
filebeat root 44r REG , /var/log/audit/audit.log. (deleted)
filebeat root 45r REG , /var/log/audit/audit.log. (deleted)
filebeat root 46r REG , /var/log/audit/audit.log. (deleted)
filebeat root 47r REG , /var/log/audit/audit.log. (deleted)
filebeat root 48r REG , /var/log/audit/audit.log. (deleted)
filebeat root 49r REG , /var/log/audit/audit.log. (deleted)
filebeat root 50r REG , /var/log/audit/audit.log. (deleted)
filebeat root 51r REG , /var/log/audit/audit.log. (deleted)
filebeat root 52r REG , /var/log/audit/audit.log. (deleted)
filebeat root 53r REG , /var/log/audit/audit.log. (deleted)
filebeat root 54r REG , /var/log/audit/audit.log. (deleted)
filebeat root 55r REG , /var/log/audit/audit.log. (deleted)
filebeat root 56r REG , /var/log/audit/audit.log. (deleted)
filebeat root 57r REG , /var/log/audit/audit.log. (deleted)
filebeat root 58r REG , /var/log/audit/audit.log. (deleted)
filebeat root 59r REG , /var/log/audit/audit.log. (deleted)
filebeat root 60r REG , /var/log/audit/audit.log. (deleted)
filebeat root 61r REG , /var/log/audit/audit.log. (deleted)
filebeat root 62r REG , /var/log/audit/audit.log. (deleted)
filebeat root 63r REG , /var/log/audit/audit.log. (deleted)
filebeat root 64r REG , /var/log/audit/audit.log. (deleted)
filebeat root 65r REG , /var/log/audit/audit.log. (deleted)
filebeat root 66r REG , /var/log/audit/audit.log. (deleted)
filebeat root 67r REG , /var/log/audit/audit.log. (deleted)
filebeat root 68r REG , /var/log/audit/audit.log. (deleted)
filebeat root 69r REG , /var/log/audit/audit.log. (deleted)
filebeat root 70r REG , /var/log/audit/audit.log. (deleted)
filebeat root 71r REG , /var/log/audit/audit.log. (deleted)
filebeat root 72r REG , /var/log/audit/audit.log. (deleted)
filebeat root 73r REG , /var/log/audit/audit.log. (deleted)
filebeat root 74r REG , /var/log/audit/audit.log. (deleted)
filebeat root 75r REG , /var/log/audit/audit.log. (deleted)
filebeat root 76r REG , /var/log/audit/audit.log. (deleted)
filebeat root 77r REG , /var/log/audit/audit.log. (deleted)
filebeat root 78r REG , /var/log/audit/audit.log. (deleted)
filebeat root 79r REG , /var/log/audit/audit.log. (deleted)
filebeat root 80r REG , /var/log/audit/audit.log. (deleted)
filebeat root 81r REG , /var/log/audit/audit.log. (deleted)
filebeat root 82r REG , /var/log/audit/audit.log. (deleted)
filebeat root 83r REG , /var/log/audit/audit.log. (deleted)
filebeat root 84r REG , /var/log/audit/audit.log. (deleted)
filebeat root 85r REG , /var/log/audit/audit.log. (deleted)
filebeat root 86r REG , /var/log/audit/audit.log. (deleted)
filebeat root 87r REG , /var/log/audit/audit.log. (deleted)
filebeat root 88r REG , /var/log/audit/audit.log. (deleted)
filebeat root 89r REG , /var/log/audit/audit.log. (deleted)
filebeat root 90r REG , /var/log/audit/audit.log. (deleted)
filebeat root 91r REG , /var/log/audit/audit.log. (deleted)
filebeat root 92r REG , /var/log/audit/audit.log. (deleted)
filebeat root 93r REG , /var/log/audit/audit.log. (deleted)
filebeat root 94r REG , /var/log/audit/audit.log. (deleted)
filebeat root 95r REG , /var/log/audit/audit.log. (deleted)
filebeat root 97r REG , /var/log/audit/audit.log. (deleted)
filebeat root 99r REG , /var/log/audit/audit.log. (deleted)
filebeat root 100r REG , /var/log/audit/audit.log. (deleted)
filebeat root 101r REG , /var/log/audit/audit.log. (deleted)
filebeat root 102r REG , /var/log/audit/audit.log. (deleted)
filebeat root 103r REG , /var/log/audit/audit.log. (deleted)
filebeat root 104r REG , /var/log/audit/audit.log. (deleted)
filebeat root 105r REG , /var/log/audit/audit.log. (deleted)
filebeat root 106r REG , /var/log/audit/audit.log. (deleted)
filebeat root 107r REG , /var/log/audit/audit.log. (deleted)
filebeat root 108r REG , /var/log/audit/audit.log. (deleted)
filebeat root 109r REG , /var/log/audit/audit.log. (deleted)
filebeat root 110r REG , /var/log/audit/audit.log. (deleted)
filebeat root 111r REG , /var/log/audit/audit.log. (deleted)
filebeat root 112r REG , /var/log/audit/audit.log. (deleted)
filebeat root 113r REG , /var/log/audit/audit.log. (deleted)
filebeat root 114r REG , /var/log/audit/audit.log. (deleted)
filebeat root 115r REG , /var/log/audit/audit.log. (deleted)
filebeat root 116r REG , /var/log/audit/audit.log. (deleted)
filebeat root 117r REG , /var/log/audit/audit.log. (deleted)
filebeat root 118r REG , /var/log/audit/audit.log. (deleted)
filebeat root 119r REG , /var/log/audit/audit.log. (deleted)
filebeat root 120r REG , /var/log/audit/audit.log. (deleted)
filebeat root 121r REG , /var/log/audit/audit.log. (deleted)
filebeat root 122r REG , /var/log/audit/audit.log. (deleted)
filebeat root 123r REG , /var/log/audit/audit.log. (deleted)
filebeat root 124r REG , /var/log/audit/audit.log. (deleted)
filebeat root 125r REG , /var/log/audit/audit.log. (deleted)
filebeat root 126r REG , /var/log/audit/audit.log. (deleted)
filebeat root 128r REG , /var/log/audit/audit.log. (deleted)
filebeat root 129r REG , /var/log/audit/audit.log. (deleted)
filebeat root 130r REG , /var/log/audit/audit.log. (deleted)
filebeat root 131r REG , /var/log/audit/audit.log. (deleted)
filebeat root 132r REG , /var/log/audit/audit.log. (deleted)
filebeat root 133r REG , /var/log/audit/audit.log. (deleted)
filebeat root 134r REG , /var/log/audit/audit.log. (deleted)
filebeat root 135r REG , /var/log/audit/audit.log. (deleted)
filebeat root 136r REG , /var/log/audit/audit.log. (deleted)
filebeat root 137r REG , /var/log/audit/audit.log. (deleted)
filebeat root 138r REG , /var/log/audit/audit.log. (deleted)
filebeat root 139r REG , /var/log/audit/audit.log. (deleted)
filebeat root 140r REG , /var/log/audit/audit.log. (deleted)
filebeat root 141r REG , /var/log/audit/audit.log. (deleted)
filebeat root 142r REG , /var/log/audit/audit.log. (deleted)
filebeat root 143r REG , /var/log/audit/audit.log. (deleted)
filebeat root 144r REG , /var/log/audit/audit.log. (deleted)
filebeat root 145r REG , /var/log/audit/audit.log. (deleted)
filebeat root 146r REG , /var/log/audit/audit.log. (deleted)
filebeat root 147r REG , /var/log/audit/audit.log. (deleted)
filebeat root 148r REG , /var/log/audit/audit.log. (deleted)
filebeat root 149r REG , /var/log/audit/audit.log. (deleted)
filebeat root 150r REG , /var/log/audit/audit.log. (deleted)
filebeat root 151r REG , /var/log/audit/audit.log. (deleted)
filebeat root 152r REG , /var/log/audit/audit.log. (deleted)
filebeat root 153r REG , /var/log/audit/audit.log. (deleted)
filebeat root 154r REG , /var/log/audit/audit.log. (deleted)
filebeat root 155r REG , /var/log/audit/audit.log. (deleted)
filebeat root 156r REG , /var/log/audit/audit.log. (deleted)
filebeat root 157r REG , /var/log/audit/audit.log. (deleted)
filebeat root 158r REG , /var/log/audit/audit.log. (deleted)
filebeat root 159r REG , /var/log/audit/audit.log. (deleted)
filebeat root 160r REG , /var/log/audit/audit.log. (deleted)
filebeat root 161r REG , /var/log/audit/audit.log. (deleted)
filebeat root 162r REG , /var/log/audit/audit.log. (deleted)
filebeat root 163r REG , /var/log/audit/audit.log. (deleted)
filebeat root 164r REG , /var/log/audit/audit.log. (deleted)
filebeat root 165r REG , /var/log/audit/audit.log. (deleted)
filebeat root 166r REG , /var/log/audit/audit.log. (deleted)
filebeat root 167r REG , /var/log/audit/audit.log. (deleted)
filebeat root 168r REG , /var/log/audit/audit.log. (deleted)
filebeat root 169r REG , /var/log/audit/audit.log. (deleted)
filebeat root 170r REG , /var/log/audit/audit.log. (deleted)
filebeat root 171r REG , /var/log/audit/audit.log. (deleted)
filebeat root 172r REG , /var/log/audit/audit.log. (deleted)
filebeat root 173r REG , /var/log/audit/audit.log. (deleted)
filebeat root 174r REG , /var/log/audit/audit.log. (deleted)
filebeat root 175r REG , /var/log/audit/audit.log. (deleted)
filebeat root 176r REG , /var/log/audit/audit.log. (deleted)
filebeat root 177r REG , /var/log/audit/audit.log. (deleted)
filebeat root 178r REG , /var/log/audit/audit.log. (deleted)
filebeat root 179r REG , /var/log/audit/audit.log. (deleted)
filebeat root 180r REG , /var/log/audit/audit.log. (deleted)
filebeat root 181r REG , /var/log/audit/audit.log. (deleted)
filebeat root 182r REG , /var/log/audit/audit.log. (deleted)
filebeat root 183r REG , /var/log/audit/audit.log. (deleted)
filebeat root 184r REG , /var/log/audit/audit.log. (deleted)
filebeat root 185r REG , /var/log/audit/audit.log. (deleted)
filebeat root 186r REG , /var/log/audit/audit.log. (deleted)
filebeat root 187r REG , /var/log/audit/audit.log. (deleted)
filebeat root 188r REG , /var/log/audit/audit.log. (deleted)
filebeat root 189r REG , /var/log/audit/audit.log. (deleted)
filebeat root 190r REG , /var/log/audit/audit.log. (deleted)
filebeat root 191r REG , /var/log/audit/audit.log. (deleted)
filebeat root 192r REG , /var/log/audit/audit.log. (deleted)
filebeat root 193r REG , /var/log/audit/audit.log. (deleted)
filebeat root 194r REG , /var/log/audit/audit.log. (deleted)
filebeat root 195r REG , /var/log/audit/audit.log. (deleted)
filebeat root 196r REG , /var/log/audit/audit.log. (deleted)
filebeat root 197r REG , /var/log/audit/audit.log. (deleted)
filebeat root 198r REG , /var/log/audit/audit.log. (deleted)
filebeat root 199r REG , /var/log/audit/audit.log. (deleted)
filebeat root 200r REG , /var/log/audit/audit.log. (deleted)
filebeat root 201r REG , /var/log/audit/audit.log. (deleted)
filebeat root 202r REG , /var/log/audit/audit.log. (deleted)
filebeat root 203r REG , /var/log/audit/audit.log. (deleted)
filebeat root 204r REG , /var/log/audit/audit.log. (deleted)
filebeat root 205r REG , /var/log/audit/audit.log. (deleted)
filebeat root 206r REG , /var/log/audit/audit.log. (deleted)
filebeat root 207r REG , /var/log/audit/audit.log. (deleted)
filebeat root 208r REG , /var/log/audit/audit.log. (deleted)
filebeat root 209r REG , /var/log/audit/audit.log. (deleted)
filebeat root 210r REG , /var/log/audit/audit.log. (deleted)
filebeat root 211r REG , /var/log/audit/audit.log. (deleted)
filebeat root 212r REG , /var/log/audit/audit.log. (deleted)
filebeat root 213r REG , /var/log/audit/audit.log. (deleted)
filebeat root 214r REG , /var/log/audit/audit.log. (deleted)
filebeat root 215r REG , /var/log/audit/audit.log. (deleted)
filebeat root 216r REG , /var/log/audit/audit.log. (deleted)
filebeat root 217r REG , /var/log/audit/audit.log. (deleted)
filebeat root 218r REG , /var/log/audit/audit.log. (deleted)
filebeat root 219r REG , /var/log/audit/audit.log. (deleted)
filebeat root 220r REG , /var/log/audit/audit.log. (deleted)
filebeat root 221r REG , /var/log/audit/audit.log. (deleted)
filebeat root 222r REG , /var/log/audit/audit.log. (deleted)
filebeat root 223r REG , /var/log/audit/audit.log. (deleted)
filebeat root 224r REG , /var/log/audit/audit.log. (deleted)
filebeat root 225r REG , /var/log/audit/audit.log. (deleted)
filebeat root 226r REG , /var/log/audit/audit.log. (deleted)
filebeat root 227r REG , /var/log/audit/audit.log. (deleted)
filebeat root 228r REG , /var/log/audit/audit.log. (deleted)
filebeat root 229r REG , /var/log/audit/audit.log. (deleted)
filebeat root 230r REG , /var/log/audit/audit.log. (deleted)
filebeat root 231r REG , /var/log/audit/audit.log. (deleted)
filebeat root 232r REG , /var/log/audit/audit.log. (deleted)
filebeat root 233r REG , /var/log/audit/audit.log. (deleted)
filebeat root 234r REG , /var/log/audit/audit.log. (deleted)
filebeat root 235r REG , /var/log/audit/audit.log. (deleted)
filebeat root 236r REG , /var/log/audit/audit.log. (deleted)
filebeat root 237r REG , /var/log/audit/audit.log. (deleted)
filebeat root 238r REG , /var/log/audit/audit.log. (deleted)
filebeat root 239r REG , /var/log/audit/audit.log. (deleted)
filebeat root 240r REG , /var/log/audit/audit.log. (deleted)
filebeat root 241r REG , /var/log/audit/audit.log. (deleted)
filebeat root 242r REG , /var/log/audit/audit.log. (deleted)
filebeat root 243r REG , /var/log/audit/audit.log. (deleted)
filebeat root 244r REG , /var/log/audit/audit.log. (deleted)
filebeat root 245r REG , /var/log/audit/audit.log. (deleted)
filebeat root 246r REG , /var/log/audit/audit.log. (deleted)
filebeat root 247r REG , /var/log/audit/audit.log. (deleted)
filebeat root 248r REG , /var/log/audit/audit.log. (deleted)
filebeat root 249r REG , /var/log/audit/audit.log. (deleted)
filebeat root 250r REG , /var/log/audit/audit.log. (deleted)
filebeat root 251r REG , /var/log/audit/audit.log. (deleted)
filebeat root 252r REG , /var/log/audit/audit.log. (deleted)
filebeat root 253r REG , /var/log/audit/audit.log. (deleted)
filebeat root 254r REG , /var/log/audit/audit.log. (deleted)
filebeat root 255r REG , /var/log/audit/audit.log. (deleted)
filebeat root 256r REG , /var/log/audit/audit.log. (deleted)
filebeat root 257r REG , /var/log/audit/audit.log. (deleted)
filebeat root 258r REG , /var/log/audit/audit.log. (deleted)
filebeat root 259r REG , /var/log/audit/audit.log. (deleted)
filebeat root 260r REG , /var/log/audit/audit.log. (deleted)
filebeat root 261r REG , /var/log/audit/audit.log. (deleted)
filebeat root 262r REG , /var/log/audit/audit.log. (deleted)
filebeat root 263r REG , /var/log/audit/audit.log. (deleted)
filebeat root 264r REG , /var/log/audit/audit.log. (deleted)
filebeat root 265r REG , /var/log/audit/audit.log. (deleted)
filebeat root 266r REG , /var/log/audit/audit.log. (deleted)
filebeat root 267r REG , /var/log/audit/audit.log. (deleted)
filebeat root 268r REG , /var/log/audit/audit.log. (deleted)
filebeat root 269r REG , /var/log/audit/audit.log. (deleted)
filebeat root 270r REG , /var/log/audit/audit.log. (deleted)
filebeat root 271r REG , /var/log/audit/audit.log. (deleted)
filebeat root 272r REG , /var/log/audit/audit.log. (deleted)
filebeat root 273r REG , /var/log/audit/audit.log. (deleted)
filebeat root 274r REG , /var/log/audit/audit.log. (deleted)
filebeat root 275r REG , /var/log/audit/audit.log. (deleted)
filebeat root 276r REG , /var/log/audit/audit.log. (deleted)
filebeat root 277r REG , /var/log/audit/audit.log. (deleted)
filebeat root 278r REG , /var/log/audit/audit.log. (deleted)
filebeat root 279r REG , /var/log/audit/audit.log. (deleted)
filebeat root 280r REG , /var/log/audit/audit.log. (deleted)
filebeat root 281r REG , /var/log/audit/audit.log. (deleted)
filebeat root 282r REG , /var/log/audit/audit.log. (deleted)
filebeat root 283r REG , /var/log/audit/audit.log. (deleted)
filebeat root 284r REG , /var/log/audit/audit.log. (deleted)
filebeat root 285r REG , /var/log/audit/audit.log. (deleted)
filebeat root 286r REG , /var/log/audit/audit.log. (deleted)
filebeat root 287r REG , /var/log/audit/audit.log. (deleted)
filebeat root 288r REG , /var/log/audit/audit.log. (deleted)
filebeat root 289r REG , /var/log/audit/audit.log. (deleted)
filebeat root 290r REG , /var/log/audit/audit.log. (deleted)
filebeat root 291r REG , /var/log/audit/audit.log. (deleted)
filebeat root 292r REG , /var/log/audit/audit.log. (deleted)
filebeat root 293r REG , /var/log/audit/audit.log. (deleted)
filebeat root 294r REG , /var/log/audit/audit.log. (deleted)
filebeat root 295r REG , /var/log/audit/audit.log. (deleted)
filebeat root 296r REG , /var/log/audit/audit.log. (deleted)
filebeat root 297r REG , /var/log/audit/audit.log. (deleted)
filebeat root 298r REG , /var/log/audit/audit.log. (deleted)
filebeat root 299r REG , /var/log/audit/audit.log. (deleted)
filebeat root 300r REG , /var/log/audit/audit.log. (deleted)
filebeat root 301r REG , /var/log/audit/audit.log. (deleted)
filebeat root 302r REG , /var/log/audit/audit.log. (deleted)
filebeat root 303r REG , /var/log/audit/audit.log. (deleted)
filebeat root 304r REG , /var/log/audit/audit.log. (deleted)
filebeat root 305r REG , /var/log/audit/audit.log. (deleted)
filebeat root 306r REG , /var/log/audit/audit.log. (deleted)
filebeat root 307r REG , /var/log/audit/audit.log. (deleted)
filebeat root 308r REG , /var/log/audit/audit.log. (deleted)
filebeat root 309r REG , /var/log/audit/audit.log. (deleted)
filebeat root 310r REG , /var/log/audit/audit.log. (deleted)
filebeat root 311r REG , /var/log/audit/audit.log. (deleted)
filebeat root 312r REG , /var/log/audit/audit.log. (deleted)
filebeat root 313r REG , /var/log/audit/audit.log. (deleted)
filebeat root 314r REG , /var/log/audit/audit.log. (deleted)
filebeat root 315r REG , /var/log/audit/audit.log. (deleted)
filebeat root 316r REG , /var/log/audit/audit.log. (deleted)
filebeat root 317r REG , /var/log/audit/audit.log. (deleted)
filebeat root 318r REG , /var/log/audit/audit.log. (deleted)
filebeat root 319r REG , /var/log/audit/audit.log. (deleted)
filebeat root 320r REG , /var/log/audit/audit.log. (deleted)
filebeat root 321r REG , /var/log/audit/audit.log. (deleted)
filebeat root 324r REG , /var/log/audit/audit.log. (deleted)
filebeat root 325r REG , /var/log/audit/audit.log. (deleted)
filebeat root 326r REG , /var/log/audit/audit.log. (deleted)
filebeat root 327r REG , /var/log/audit/audit.log. (deleted)
filebeat root 328r REG , /var/log/audit/audit.log. (deleted)
filebeat root 329r REG , /var/log/audit/audit.log. (deleted)
filebeat root 330r REG , /var/log/audit/audit.log. (deleted)
filebeat root 331r REG , /var/log/audit/audit.log. (deleted)
filebeat root 332r REG , /var/log/audit/audit.log. (deleted)
filebeat root 333r REG , /var/log/audit/audit.log. (deleted)
filebeat root 334r REG , /var/log/audit/audit.log. (deleted)
filebeat root 335r REG , /var/log/audit/audit.log. (deleted)
filebeat root 336r REG , /var/log/audit/audit.log. (deleted)
filebeat root 337r REG , /var/log/audit/audit.log. (deleted)
filebeat root 338r REG , /var/log/audit/audit.log. (deleted)
filebeat root 339r REG , /var/log/audit/audit.log. (deleted)
filebeat root 340r REG , /var/log/audit/audit.log. (deleted)
filebeat root 341r REG , /var/log/audit/audit.log. (deleted)
filebeat root 342r REG , /var/log/audit/audit.log. (deleted)
filebeat root 343r REG , /var/log/audit/audit.log. (deleted)
filebeat root 344r REG , /var/log/audit/audit.log. (deleted)
filebeat root 345r REG , /var/log/audit/audit.log. (deleted)
filebeat root 346r REG , /var/log/audit/audit.log. (deleted)
filebeat root 347r REG , /var/log/audit/audit.log. (deleted)
filebeat root 348r REG , /var/log/audit/audit.log. (deleted)
filebeat root 349r REG , /var/log/audit/audit.log. (deleted)
filebeat root 350r REG , /var/log/audit/audit.log. (deleted)
filebeat root 352r REG , /var/log/audit/audit.log. (deleted)
filebeat root 353r REG , /var/log/audit/audit.log. (deleted)
filebeat root 354r REG , /var/log/audit/audit.log. (deleted)
filebeat root 355r REG , /var/log/audit/audit.log. (deleted)
filebeat root 356r REG , /var/log/audit/audit.log. (deleted)
filebeat root 357r REG , /var/log/audit/audit.log. (deleted)
filebeat root 358r REG , /var/log/audit/audit.log. (deleted)
filebeat root 359r REG , /var/log/audit/audit.log. (deleted)
filebeat root 360r REG , /var/log/audit/audit.log. (deleted)
filebeat root 361r REG , /var/log/audit/audit.log. (deleted)
filebeat root 362r REG , /var/log/audit/audit.log. (deleted)
filebeat root 363r REG , /var/log/audit/audit.log. (deleted)
filebeat root 364r REG , /var/log/audit/audit.log. (deleted)
filebeat root 365r REG , /var/log/audit/audit.log. (deleted)
filebeat root 366r REG , /var/log/audit/audit.log. (deleted)
filebeat root 367r REG , /var/log/audit/audit.log. (deleted)
filebeat root 368r REG , /var/log/audit/audit.log. (deleted)
filebeat root 369r REG , /var/log/audit/audit.log. (deleted)
filebeat root 370r REG , /var/log/audit/audit.log. (deleted)
filebeat root 371r REG , /var/log/audit/audit.log. (deleted)
filebeat root 372r REG , /var/log/audit/audit.log. (deleted)
filebeat root 373r REG , /var/log/audit/audit.log. (deleted)
filebeat root 374r REG , /var/log/audit/audit.log. (deleted)
filebeat root 375r REG , /var/log/audit/audit.log. (deleted)
filebeat root 376r REG , /var/log/audit/audit.log. (deleted)
filebeat root 377r REG , /var/log/audit/audit.log. (deleted)
filebeat root 378r REG , /var/log/audit/audit.log. (deleted)
filebeat root 379r REG , /var/log/audit/audit.log. (deleted)
filebeat root 380r REG , /var/log/audit/audit.log. (deleted)
filebeat root 381r REG , /var/log/audit/audit.log. (deleted)
filebeat root 382r REG , /var/log/audit/audit.log. (deleted)
filebeat root 383r REG , /var/log/audit/audit.log. (deleted)
filebeat root 384r REG , /var/log/audit/audit.log. (deleted)
filebeat root 385r REG , /var/log/audit/audit.log. (deleted)
filebeat root 386r REG , /var/log/audit/audit.log. (deleted)
filebeat root 387r REG , /var/log/audit/audit.log. (deleted)
filebeat root 388r REG , /var/log/audit/audit.log. (deleted)
filebeat root 389r REG , /var/log/audit/audit.log. (deleted)
filebeat root 390r REG , /var/log/audit/audit.log. (deleted)
filebeat root 391r REG , /var/log/audit/audit.log. (deleted)
filebeat root 392r REG , /var/log/audit/audit.log. (deleted)
filebeat root 393r REG , /var/log/audit/audit.log. (deleted)
filebeat root 394r REG , /var/log/audit/audit.log. (deleted)
filebeat root 395r REG , /var/log/audit/audit.log. (deleted)
filebeat root 396r REG , /var/log/audit/audit.log. (deleted)
filebeat root 397r REG , /var/log/audit/audit.log. (deleted)
filebeat root 398r REG , /var/log/audit/audit.log. (deleted)
filebeat root 399r REG , /var/log/audit/audit.log. (deleted)
filebeat root 400r REG , /var/log/audit/audit.log. (deleted)
filebeat root 401r REG , /var/log/audit/audit.log. (deleted)
filebeat root 402r REG , /var/log/audit/audit.log. (deleted)
filebeat root 403r REG , /var/log/audit/audit.log. (deleted)
filebeat root 404r REG , /var/log/audit/audit.log. (deleted)
filebeat root 405r REG , /var/log/audit/audit.log. (deleted)
filebeat root 406r REG , /var/log/audit/audit.log. (deleted)
filebeat root 407r REG , /var/log/audit/audit.log. (deleted)
filebeat root 408r REG , /var/log/audit/audit.log. (deleted)
filebeat root 409r REG , /var/log/audit/audit.log. (deleted)
filebeat root 410r REG , /var/log/audit/audit.log. (deleted)
filebeat root 411r REG , /var/log/audit/audit.log. (deleted)
filebeat root 412r REG , /var/log/audit/audit.log. (deleted)
filebeat root 413r REG , /var/log/audit/audit.log. (deleted)
filebeat root 414r REG , /var/log/audit/audit.log. (deleted)
filebeat root 415r REG , /var/log/audit/audit.log. (deleted)
filebeat root 416r REG , /var/log/audit/audit.log. (deleted)
filebeat root 417r REG , /var/log/audit/audit.log. (deleted)
filebeat root 418r REG , /var/log/audit/audit.log. (deleted)
filebeat root 419r REG , /var/log/audit/audit.log. (deleted)
filebeat root 420r REG , /var/log/audit/audit.log. (deleted)
filebeat root 421r REG , /var/log/audit/audit.log. (deleted)
filebeat root 422r REG , /var/log/audit/audit.log. (deleted)
filebeat root 423r REG , /var/log/audit/audit.log. (deleted)
filebeat root 424r REG , /var/log/audit/audit.log. (deleted)
filebeat root 425r REG , /var/log/audit/audit.log. (deleted)
filebeat root 426r REG , /var/log/audit/audit.log. (deleted)
filebeat root 427r REG , /var/log/audit/audit.log. (deleted)
filebeat root 428r REG , /var/log/audit/audit.log. (deleted)
filebeat root 429r REG , /var/log/audit/audit.log. (deleted)
filebeat root 430r REG , /var/log/audit/audit.log. (deleted)
filebeat root 431r REG , /var/log/audit/audit.log. (deleted)
filebeat root 432r REG , /var/log/audit/audit.log. (deleted)
filebeat root 433r REG , /var/log/audit/audit.log. (deleted)
filebeat root 434r REG , /var/log/audit/audit.log. (deleted)
filebeat root 435r REG , /var/log/audit/audit.log. (deleted)
filebeat root 436r REG , /var/log/audit/audit.log. (deleted)
filebeat root 437r REG , /var/log/audit/audit.log. (deleted)
filebeat root 438r REG , /var/log/audit/audit.log. (deleted)
filebeat root 439r REG , /var/log/audit/audit.log. (deleted)
filebeat root 440r REG , /var/log/audit/audit.log. (deleted)
filebeat root 441r REG , /var/log/audit/audit.log. (deleted)
filebeat root 442r REG , /var/log/audit/audit.log. (deleted)
filebeat root 443r REG , /var/log/audit/audit.log. (deleted)
filebeat root 444r REG , /var/log/audit/audit.log. (deleted)
filebeat root 445r REG , /var/log/audit/audit.log. (deleted)
filebeat root 446r REG , /var/log/audit/audit.log. (deleted)
filebeat root 447r REG , /var/log/audit/audit.log. (deleted)
filebeat root 448r REG , /var/log/audit/audit.log. (deleted)
filebeat root 449r REG , /var/log/audit/audit.log. (deleted)
filebeat root 450r REG , /var/log/audit/audit.log. (deleted)
filebeat root 451r REG , /var/log/audit/audit.log. (deleted)
filebeat root 452r REG , /var/log/audit/audit.log. (deleted)
filebeat root 453r REG , /var/log/audit/audit.log. (deleted)
filebeat root 454r REG , /var/log/audit/audit.log. (deleted)
filebeat root 455r REG , /var/log/audit/audit.log. (deleted)
filebeat root 456r REG , /var/log/audit/audit.log. (deleted)
filebeat root 457r REG , /var/log/audit/audit.log. (deleted)
filebeat root 458r REG , /var/log/audit/audit.log. (deleted)
filebeat root 459r REG , /var/log/audit/audit.log. (deleted)
filebeat root 460r REG , /var/log/audit/audit.log. (deleted)
filebeat root 461r REG , /var/log/audit/audit.log. (deleted)
filebeat root 462r REG , /var/log/audit/audit.log. (deleted)
filebeat root 463r REG , /var/log/audit/audit.log. (deleted)
filebeat root 464r REG , /var/log/audit/audit.log. (deleted)
filebeat root 465r REG , /var/log/audit/audit.log. (deleted)
filebeat root 466r REG , /var/log/audit/audit.log. (deleted)
filebeat root 467r REG , /var/log/audit/audit.log. (deleted)
filebeat root 468r REG , /var/log/audit/audit.log. (deleted)
filebeat root 469r REG , /var/log/audit/audit.log. (deleted)
filebeat root 470r REG , /var/log/audit/audit.log. (deleted)
filebeat root 471r REG , /var/log/audit/audit.log. (deleted)
filebeat root 472r REG , /var/log/audit/audit.log. (deleted)
filebeat root 473r REG , /var/log/audit/audit.log. (deleted)
filebeat root 474r REG , /var/log/audit/audit.log. (deleted)
filebeat root 475r REG , /var/log/audit/audit.log. (deleted)
filebeat root 476r REG , /var/log/audit/audit.log. (deleted)
filebeat root 477r REG , /var/log/audit/audit.log. (deleted)
filebeat root 478r REG , /var/log/audit/audit.log. (deleted)
filebeat root 479r REG , /var/log/audit/audit.log. (deleted)
filebeat root 480r REG , /var/log/audit/audit.log. (deleted)
filebeat root 481r REG , /var/log/audit/audit.log. (deleted)
filebeat root 482r REG , /var/log/audit/audit.log. (deleted)
filebeat root 483r REG , /var/log/audit/audit.log. (deleted)
filebeat root 484r REG , /var/log/audit/audit.log. (deleted)
filebeat root 485r REG , /var/log/audit/audit.log. (deleted)
filebeat root 486r REG , /var/log/audit/audit.log. (deleted)
filebeat root 487r REG , /var/log/audit/audit.log. (deleted)
filebeat root 488r REG , /var/log/audit/audit.log. (deleted)
filebeat root 489r REG , /var/log/audit/audit.log. (deleted)
filebeat root 490r REG , /var/log/audit/audit.log. (deleted)
filebeat root 491r REG , /var/log/audit/audit.log. (deleted)
filebeat root 492r REG , /var/log/audit/audit.log. (deleted)
filebeat root 493r REG , /var/log/audit/audit.log. (deleted)
filebeat root 494r REG , /var/log/audit/audit.log. (deleted)
filebeat root 495r REG , /var/log/audit/audit.log. (deleted)
filebeat root 496r REG , /var/log/audit/audit.log. (deleted)
filebeat root 497r REG , /var/log/audit/audit.log. (deleted)
filebeat root 498r REG , /var/log/audit/audit.log. (deleted)
filebeat root 499r REG , /var/log/audit/audit.log. (deleted)
filebeat root 500r REG , /var/log/audit/audit.log. (deleted)
filebeat root 501r REG , /var/log/audit/audit.log. (deleted)
filebeat root 502r REG , /var/log/audit/audit.log. (deleted)
filebeat root 503r REG , /var/log/audit/audit.log. (deleted)
filebeat root 504r REG , /var/log/audit/audit.log. (deleted)
filebeat root 505r REG , /var/log/audit/audit.log. (deleted)
filebeat root 506r REG , /var/log/audit/audit.log. (deleted)
filebeat root 507r REG , /var/log/audit/audit.log. (deleted)
filebeat root 508r REG , /var/log/audit/audit.log. (deleted)
filebeat root 509r REG , /var/log/audit/audit.log. (deleted)
filebeat root 510r REG , /var/log/audit/audit.log. (deleted)
filebeat root 511r REG , /var/log/audit/audit.log. (deleted)
filebeat root 512r REG , /var/log/audit/audit.log. (deleted)
filebeat root 513r REG , /var/log/audit/audit.log. (deleted)
filebeat root 514r REG , /var/log/audit/audit.log. (deleted)
filebeat root 515r REG , /var/log/audit/audit.log. (deleted)
filebeat root 516r REG , /var/log/audit/audit.log. (deleted)
filebeat root 517r REG , /var/log/audit/audit.log. (deleted)
filebeat root 518r REG , /var/log/audit/audit.log. (deleted)
filebeat root 519r REG , /var/log/audit/audit.log. (deleted)
filebeat root 520r REG , /var/log/audit/audit.log. (deleted)
filebeat root 521r REG , /var/log/audit/audit.log. (deleted)
filebeat root 522r REG , /var/log/audit/audit.log. (deleted)
filebeat root 523r REG , /var/log/audit/audit.log. (deleted)
filebeat root 524r REG , /var/log/audit/audit.log. (deleted)
filebeat root 525r REG , /var/log/audit/audit.log. (deleted)
filebeat root 526r REG , /var/log/audit/audit.log. (deleted)
filebeat root 527r REG , /var/log/audit/audit.log. (deleted)
filebeat root 528r REG , /var/log/audit/audit.log. (deleted)
filebeat root 529r REG , /var/log/audit/audit.log. (deleted)
filebeat root 530r REG , /var/log/audit/audit.log. (deleted)
filebeat root 531r REG , /var/log/audit/audit.log. (deleted)
filebeat root 532r REG , /var/log/audit/audit.log. (deleted)
filebeat root 533r REG , /var/log/audit/audit.log. (deleted)
filebeat root 534r REG , /var/log/audit/audit.log. (deleted)
filebeat root 535r REG , /var/log/audit/audit.log. (deleted)
filebeat root 536r REG , /var/log/audit/audit.log. (deleted)
filebeat root 537r REG , /var/log/audit/audit.log. (deleted)
filebeat root 538r REG , /var/log/audit/audit.log. (deleted)
filebeat root 539r REG , /var/log/audit/audit.log. (deleted)
filebeat root 540r REG , /var/log/audit/audit.log. (deleted)
filebeat root 541r REG , /var/log/audit/audit.log. (deleted)
filebeat root 542r REG , /var/log/audit/audit.log. (deleted)
filebeat root 543r REG , /var/log/audit/audit.log. (deleted)
filebeat root 544r REG , /var/log/audit/audit.log. (deleted)
filebeat root 545r REG , /var/log/audit/audit.log. (deleted)
filebeat root 547r REG , /var/log/audit/audit.log. (deleted)
filebeat root 548r REG , /var/log/audit/audit.log. (deleted)
filebeat root 550r REG , /var/log/audit/audit.log. (deleted)
filebeat root 551r REG , /var/log/audit/audit.log. (deleted)
filebeat root 552r REG , /var/log/audit/audit.log. (deleted)
filebeat root 553r REG , /var/log/audit/audit.log. (deleted)
filebeat root 554r REG , /var/log/audit/audit.log. (deleted)
filebeat root 555r REG , /var/log/audit/audit.log. (deleted)
filebeat root 556r REG , /var/log/audit/audit.log. (deleted)
filebeat root 557r REG , /var/log/audit/audit.log. (deleted)
filebeat root 558r REG , /var/log/audit/audit.log. (deleted)
filebeat root 559r REG , /var/log/audit/audit.log. (deleted)
filebeat root 560r REG , /var/log/audit/audit.log. (deleted)
filebeat root 561r REG , /var/log/audit/audit.log. (deleted)
filebeat root 562r REG , /var/log/audit/audit.log. (deleted)
filebeat root 563r REG , /var/log/audit/audit.log. (deleted)
filebeat root 564r REG , /var/log/audit/audit.log. (deleted)
filebeat root 565r REG , /var/log/audit/audit.log. (deleted)
filebeat root 566r REG , /var/log/audit/audit.log. (deleted)
filebeat root 567r REG , /var/log/audit/audit.log. (deleted)
filebeat root 568r REG , /var/log/audit/audit.log. (deleted)
filebeat root 569r REG , /var/log/audit/audit.log. (deleted)
filebeat root 570r REG , /var/log/audit/audit.log. (deleted)
filebeat root 571r REG , /var/log/audit/audit.log. (deleted)
filebeat root 572r REG , /var/log/audit/audit.log. (deleted)
filebeat root 573r REG , /var/log/audit/audit.log. (deleted)
filebeat root 574r REG , /var/log/audit/audit.log. (deleted)
filebeat root 575r REG , /var/log/audit/audit.log. (deleted)
filebeat root 576r REG , /var/log/audit/audit.log. (deleted)
filebeat root 577r REG , /var/log/audit/audit.log. (deleted)
filebeat root 578r REG , /var/log/audit/audit.log. (deleted)
filebeat root 579r REG , /var/log/audit/audit.log. (deleted)
filebeat root 580r REG , /var/log/audit/audit.log. (deleted)
filebeat root 582r REG , /var/log/audit/audit.log. (deleted)
filebeat root 583r REG , /var/log/audit/audit.log. (deleted)
filebeat root 584r REG , /var/log/audit/audit.log. (deleted)
filebeat root 585r REG , /var/log/audit/audit.log. (deleted)
filebeat root 586r REG , /var/log/audit/audit.log. (deleted)
filebeat root 587r REG , /var/log/audit/audit.log. (deleted)
filebeat root 588r REG , /var/log/audit/audit.log. (deleted)
filebeat root 589r REG , /var/log/audit/audit.log. (deleted)
filebeat root 590r REG , /var/log/audit/audit.log. (deleted)
filebeat root 591r REG , /var/log/audit/audit.log. (deleted)
filebeat root 592r REG , /var/log/audit/audit.log. (deleted)
filebeat root 593r REG , /var/log/audit/audit.log. (deleted)
filebeat root 594r REG , /var/log/audit/audit.log. (deleted)
filebeat root 595r REG , /var/log/audit/audit.log. (deleted)
filebeat root 596r REG , /var/log/audit/audit.log. (deleted)
filebeat root 597r REG , /var/log/audit/audit.log. (deleted)
filebeat root 598r REG , /var/log/audit/audit.log. (deleted)
filebeat root 599r REG , /var/log/audit/audit.log. (deleted)
filebeat root 600r REG , /var/log/audit/audit.log. (deleted)
filebeat root 601r REG , /var/log/audit/audit.log. (deleted)
filebeat root 602r REG , /var/log/audit/audit.log. (deleted)
filebeat root 603r REG , /var/log/audit/audit.log. (deleted)
filebeat root 604r REG , /var/log/audit/audit.log. (deleted)
filebeat root 605r REG , /var/log/audit/audit.log. (deleted)
filebeat root 606r REG , /var/log/audit/audit.log. (deleted)
filebeat root 607r REG , /var/log/audit/audit.log. (deleted)
filebeat root 608r REG , /var/log/audit/audit.log. (deleted)
filebeat root 609r REG , /var/log/audit/audit.log. (deleted)
filebeat root 610r REG , /var/log/audit/audit.log. (deleted)
filebeat root 611r REG , /var/log/audit/audit.log. (deleted)
filebeat root 612r REG , /var/log/audit/audit.log. (deleted)
filebeat root 613r REG , /var/log/audit/audit.log. (deleted)
filebeat root 614r REG , /var/log/audit/audit.log. (deleted)
filebeat root 615r REG , /var/log/audit/audit.log. (deleted)
filebeat root 616r REG , /var/log/audit/audit.log. (deleted)
filebeat root 617r REG , /var/log/audit/audit.log. (deleted)
filebeat root 618r REG , /var/log/audit/audit.log. (deleted)
filebeat root 619r REG , /var/log/audit/audit.log. (deleted)
filebeat root 620r REG , /var/log/audit/audit.log. (deleted)
filebeat root 621r REG , /var/log/audit/audit.log. (deleted)
filebeat root 622r REG , /var/log/audit/audit.log. (deleted)
filebeat root 623r REG , /var/log/audit/audit.log. (deleted)
filebeat root 624r REG , /var/log/audit/audit.log. (deleted)
filebeat root 625r REG , /var/log/audit/audit.log. (deleted)
filebeat root 626r REG , /var/log/audit/audit.log. (deleted)
filebeat root 627r REG , /var/log/audit/audit.log. (deleted)
filebeat root 628r REG , /var/log/audit/audit.log. (deleted)
filebeat root 629r REG , /var/log/audit/audit.log. (deleted)
filebeat root 630r REG , /var/log/audit/audit.log. (deleted)
filebeat root 631r REG , /var/log/audit/audit.log. (deleted)
filebeat root 632r REG , /var/log/audit/audit.log. (deleted)
filebeat root 633r REG , /var/log/audit/audit.log. (deleted)
filebeat root 634r REG , /var/log/audit/audit.log. (deleted)
filebeat root 635r REG , /var/log/audit/audit.log. (deleted)
filebeat root 636r REG , /var/log/audit/audit.log. (deleted)
filebeat root 637r REG , /var/log/audit/audit.log. (deleted)
filebeat root 638r REG , /var/log/audit/audit.log. (deleted)
filebeat root 639r REG , /var/log/audit/audit.log. (deleted)
filebeat root 640r REG , /var/log/audit/audit.log. (deleted)
filebeat root 641r REG , /var/log/audit/audit.log. (deleted)
filebeat root 642r REG , /var/log/audit/audit.log. (deleted)
filebeat root 643r REG , /var/log/audit/audit.log. (deleted)
filebeat root 644r REG , /var/log/audit/audit.log. (deleted)
filebeat root 645r REG , /var/log/audit/audit.log. (deleted)
filebeat root 646r REG , /var/log/audit/audit.log. (deleted)
filebeat root 647r REG , /var/log/audit/audit.log. (deleted)
filebeat root 648r REG , /var/log/audit/audit.log. (deleted)
filebeat root 649r REG , /var/log/audit/audit.log. (deleted)
filebeat root 650r REG , /var/log/audit/audit.log. (deleted)
filebeat root 651r REG , /var/log/audit/audit.log. (deleted)
filebeat root 652r REG , /var/log/audit/audit.log. (deleted)
filebeat root 653r REG , /var/log/audit/audit.log. (deleted)
filebeat root 654r REG , /var/log/audit/audit.log. (deleted)
filebeat root 655r REG , /var/log/audit/audit.log. (deleted)
filebeat root 656r REG , /var/log/audit/audit.log. (deleted)
filebeat root 657r REG , /var/log/audit/audit.log. (deleted)
filebeat root 658r REG , /var/log/audit/audit.log. (deleted)
filebeat root 659r REG , /var/log/audit/audit.log. (deleted)
filebeat root 660r REG , /var/log/audit/audit.log. (deleted)
filebeat root 661r REG , /var/log/audit/audit.log. (deleted)
filebeat root 662r REG , /var/log/audit/audit.log. (deleted)
filebeat root 663r REG , /var/log/audit/audit.log. (deleted)
filebeat root 664r REG , /var/log/audit/audit.log. (deleted)
filebeat root 665r REG , /var/log/audit/audit.log. (deleted)
filebeat root 666r REG , /var/log/audit/audit.log. (deleted)
filebeat root 667r REG , /var/log/audit/audit.log. (deleted)
filebeat root 668r REG , /var/log/audit/audit.log. (deleted)
filebeat root 669r REG , /var/log/audit/audit.log. (deleted)
filebeat root 670r REG , /var/log/audit/audit.log. (deleted)
filebeat root 671r REG , /var/log/audit/audit.log. (deleted)
filebeat root 672r REG , /var/log/audit/audit.log. (deleted)
filebeat root 673r REG , /var/log/audit/audit.log. (deleted)
filebeat root 674r REG , /var/log/audit/audit.log. (deleted)
filebeat root 675r REG , /var/log/audit/audit.log. (deleted)
filebeat root 676r REG , /var/log/audit/audit.log. (deleted)
filebeat root 677r REG , /var/log/audit/audit.log. (deleted)
filebeat root 678r REG , /var/log/audit/audit.log. (deleted)
filebeat root 679r REG , /var/log/audit/audit.log. (deleted)
filebeat root 680r REG , /var/log/audit/audit.log. (deleted)
filebeat root 681r REG , /var/log/audit/audit.log. (deleted)
filebeat root 682r REG , /var/log/audit/audit.log. (deleted)
filebeat root 683r REG , /var/log/audit/audit.log. (deleted)
filebeat root 684r REG , /var/log/audit/audit.log. (deleted)
filebeat root 685r REG , /var/log/audit/audit.log. (deleted)
filebeat root 686r REG , /var/log/audit/audit.log. (deleted)
filebeat root 687r REG , /var/log/audit/audit.log. (deleted)
filebeat root 688r REG , /var/log/audit/audit.log. (deleted)
filebeat root 689r REG , /var/log/audit/audit.log. (deleted)
filebeat root 690r REG , /var/log/audit/audit.log. (deleted)
filebeat root 691r REG , /var/log/audit/audit.log. (deleted)
filebeat root 692r REG , /var/log/audit/audit.log. (deleted)
filebeat root 693r REG , /var/log/audit/audit.log. (deleted)
filebeat root 694r REG , /var/log/audit/audit.log. (deleted)
filebeat root 695r REG , /var/log/audit/audit.log. (deleted)
filebeat root 696r REG , /var/log/audit/audit.log. (deleted)
filebeat root 697r REG , /var/log/audit/audit.log. (deleted)
filebeat root 698r REG , /var/log/audit/audit.log. (deleted)
filebeat root 699r REG , /var/log/audit/audit.log. (deleted)
filebeat root 700r REG , /var/log/audit/audit.log. (deleted)
filebeat root 701r REG , /var/log/audit/audit.log. (deleted)
filebeat root 702r REG , /var/log/audit/audit.log. (deleted)
filebeat root 703r REG , /var/log/audit/audit.log. (deleted)
filebeat root 704r REG , /var/log/audit/audit.log. (deleted)
filebeat root 705r REG , /var/log/audit/audit.log. (deleted)
filebeat root 706r REG , /var/log/audit/audit.log. (deleted)
filebeat root 707r REG , /var/log/audit/audit.log. (deleted)
filebeat root 708r REG , /var/log/audit/audit.log. (deleted)
filebeat root 709r REG , /var/log/audit/audit.log. (deleted)
filebeat root 710r REG , /var/log/audit/audit.log. (deleted)
filebeat root 711r REG , /var/log/audit/audit.log. (deleted)
filebeat root 712r REG , /var/log/audit/audit.log. (deleted)
filebeat root 713r REG , /var/log/audit/audit.log. (deleted)
filebeat root 714r REG , /var/log/audit/audit.log. (deleted)
filebeat root 715r REG , /var/log/audit/audit.log. (deleted)
filebeat root 716r REG , /var/log/audit/audit.log. (deleted)
filebeat root 717r REG , /var/log/audit/audit.log. (deleted)
filebeat root 718r REG , /var/log/audit/audit.log. (deleted)
filebeat root 719r REG , /var/log/audit/audit.log. (deleted)
filebeat root 720r REG , /var/log/audit/audit.log. (deleted)
filebeat root 721r REG , /var/log/audit/audit.log. (deleted)
filebeat root 722r REG , /var/log/audit/audit.log. (deleted)
filebeat root 723r REG , /var/log/audit/audit.log. (deleted)
filebeat root 724r REG , /var/log/audit/audit.log. (deleted)
filebeat root 725r REG , /var/log/audit/audit.log. (deleted)
filebeat root 726r REG , /var/log/audit/audit.log. (deleted)
filebeat root 727r REG , /var/log/audit/audit.log. (deleted)
filebeat root 728r REG , /var/log/audit/audit.log. (deleted)
filebeat root 729r REG , /var/log/audit/audit.log. (deleted)
filebeat root 730r REG , /var/log/audit/audit.log. (deleted)
filebeat root 731r REG , /var/log/audit/audit.log. (deleted)
filebeat root 732r REG , /var/log/audit/audit.log. (deleted)
filebeat root 733r REG , /var/log/audit/audit.log. (deleted)
filebeat root 734r REG , /var/log/audit/audit.log. (deleted)
filebeat root 735r REG , /var/log/audit/audit.log. (deleted)
filebeat root 736r REG , /var/log/audit/audit.log. (deleted)
filebeat root 737r REG , /var/log/audit/audit.log. (deleted)
filebeat root 738r REG , /var/log/audit/audit.log. (deleted)
filebeat root 739r REG , /var/log/audit/audit.log. (deleted)
filebeat root 740r REG , /var/log/audit/audit.log. (deleted)
filebeat root 741r REG , /var/log/audit/audit.log. (deleted)
filebeat root 742r REG , /var/log/audit/audit.log. (deleted)
filebeat root 743r REG , /var/log/audit/audit.log. (deleted)
filebeat root 744r REG , /var/log/audit/audit.log. (deleted)
filebeat root 745r REG , /var/log/audit/audit.log. (deleted)
filebeat root 746r REG , /var/log/audit/audit.log. (deleted)
filebeat root 747r REG , /var/log/audit/audit.log. (deleted)
filebeat root 748r REG , /var/log/audit/audit.log. (deleted)
filebeat root 749r REG , /var/log/audit/audit.log. (deleted)
filebeat root 750r REG , /var/log/audit/audit.log. (deleted)
filebeat root 751r REG , /var/log/audit/audit.log. (deleted)
filebeat root 752r REG , /var/log/audit/audit.log. (deleted)
filebeat root 753r REG , /var/log/audit/audit.log. (deleted)
filebeat root 754r REG , /var/log/audit/audit.log. (deleted)
filebeat root 755r REG , /var/log/audit/audit.log. (deleted)
filebeat root 756r REG , /var/log/audit/audit.log. (deleted)
filebeat root 757r REG , /var/log/audit/audit.log. (deleted)
filebeat root 758r REG , /var/log/audit/audit.log. (deleted)
filebeat root 759r REG , /var/log/audit/audit.log. (deleted)
filebeat root 760r REG , /var/log/audit/audit.log. (deleted)
filebeat root 761r REG , /var/log/audit/audit.log. (deleted)
filebeat root 762r REG , /var/log/audit/audit.log. (deleted)
filebeat root 763r REG , /var/log/audit/audit.log. (deleted)
filebeat root 764r REG , /var/log/audit/audit.log. (deleted)
filebeat root 765r REG , /var/log/audit/audit.log. (deleted)
filebeat root 766r REG , /var/log/audit/audit.log. (deleted)
filebeat root 767r REG , /var/log/audit/audit.log. (deleted)
filebeat root 768r REG , /var/log/audit/audit.log. (deleted)
filebeat root 769r REG , /var/log/audit/audit.log. (deleted)
filebeat root 770r REG , /var/log/audit/audit.log. (deleted)
filebeat root 771r REG , /var/log/audit/audit.log. (deleted)
filebeat root 772r REG , /var/log/audit/audit.log. (deleted)
filebeat root 774r REG , /var/log/audit/audit.log. (deleted)
filebeat root 776r REG , /var/log/audit/audit.log. (deleted)
filebeat root 777r REG , /var/log/audit/audit.log. (deleted)
filebeat root 778r REG , /var/log/audit/audit.log. (deleted)
filebeat root 779r REG , /var/log/audit/audit.log. (deleted)
filebeat root 780r REG , /var/log/audit/audit.log. (deleted)
filebeat root 781r REG , /var/log/audit/audit.log. (deleted)
filebeat root 782r REG , /var/log/audit/audit.log. (deleted)
filebeat root 783r REG , /var/log/audit/audit.log. (deleted)
filebeat root 784r REG , /var/log/audit/audit.log. (deleted)
filebeat root 785r REG , /var/log/audit/audit.log. (deleted)
filebeat root 786r REG , /var/log/audit/audit.log. (deleted)
filebeat root 787r REG , /var/log/audit/audit.log. (deleted)
filebeat root 788r REG , /var/log/audit/audit.log. (deleted)
filebeat root 789r REG , /var/log/audit/audit.log. (deleted)
filebeat root 790r REG , /var/log/audit/audit.log. (deleted)
filebeat root 791r REG , /var/log/audit/audit.log. (deleted)
filebeat root 792r REG , /var/log/audit/audit.log. (deleted)
filebeat root 793r REG , /var/log/audit/audit.log. (deleted)
filebeat root 794r REG , /var/log/audit/audit.log. (deleted)
filebeat root 795r REG , /var/log/audit/audit.log. (deleted)
filebeat root 796r REG , /var/log/audit/audit.log. (deleted)
filebeat root 797r REG , /var/log/audit/audit.log. (deleted)
filebeat root 798r REG , /var/log/audit/audit.log. (deleted)
filebeat root 799r REG , /var/log/audit/audit.log. (deleted)
filebeat root 800r REG , /var/log/audit/audit.log. (deleted)
filebeat root 801r REG , /var/log/audit/audit.log. (deleted)
filebeat root 802r REG , /var/log/audit/audit.log. (deleted)
filebeat root 803r REG , /var/log/audit/audit.log. (deleted)
filebeat root 804r REG , /var/log/audit/audit.log. (deleted)
filebeat root 805r REG , /var/log/audit/audit.log. (deleted)
filebeat root 806r REG , /var/log/audit/audit.log. (deleted)
filebeat root 808r REG , /var/log/audit/audit.log. (deleted)
filebeat root 809r REG , /var/log/audit/audit.log. (deleted)
filebeat root 810r REG , /var/log/audit/audit.log. (deleted)
filebeat root 811r REG , /var/log/audit/audit.log. (deleted)
filebeat root 812r REG , /var/log/audit/audit.log. (deleted)
filebeat root 813r REG , /var/log/audit/audit.log. (deleted)
filebeat root 814r REG , /var/log/audit/audit.log. (deleted)
filebeat root 815r REG , /var/log/audit/audit.log. (deleted)
filebeat root 816r REG , /var/log/audit/audit.log. (deleted)
filebeat root 817r REG , /var/log/audit/audit.log. (deleted)
filebeat root 818r REG , /var/log/audit/audit.log. (deleted)
filebeat root 819r REG , /var/log/audit/audit.log. (deleted)
filebeat root 820r REG , /var/log/audit/audit.log. (deleted)
filebeat root 821r REG , /var/log/audit/audit.log. (deleted)
filebeat root 822r REG , /var/log/audit/audit.log. (deleted)
filebeat root 823r REG , /var/log/audit/audit.log. (deleted)
filebeat root 824r REG , /var/log/audit/audit.log. (deleted)
filebeat root 825r REG , /var/log/audit/audit.log. (deleted)
filebeat root 826r REG , /var/log/audit/audit.log. (deleted)
filebeat root 827r REG , /var/log/audit/audit.log. (deleted)
filebeat root 828r REG , /var/log/audit/audit.log. (deleted)
filebeat root 829r REG , /var/log/audit/audit.log. (deleted)
filebeat root 830r REG , /var/log/audit/audit.log. (deleted)
filebeat root 831r REG , /var/log/audit/audit.log. (deleted)
filebeat root 832r REG , /var/log/audit/audit.log. (deleted)
filebeat root 833r REG , /var/log/audit/audit.log. (deleted)
filebeat root 834r REG , /var/log/audit/audit.log. (deleted)
filebeat root 835r REG , /var/log/audit/audit.log. (deleted)
filebeat root 836r REG , /var/log/audit/audit.log. (deleted)
filebeat root 837r REG , /var/log/audit/audit.log. (deleted)
filebeat root 838r REG , /var/log/audit/audit.log. (deleted)
filebeat root 839r REG , /var/log/audit/audit.log. (deleted)
filebeat root 840r REG , /var/log/audit/audit.log. (deleted)
filebeat root 841r REG , /var/log/audit/audit.log. (deleted)
filebeat root 842r REG , /var/log/audit/audit.log. (deleted)
filebeat root 843r REG , /var/log/audit/audit.log. (deleted)
filebeat root 844r REG , /var/log/audit/audit.log. (deleted)
filebeat root 845r REG , /var/log/audit/audit.log. (deleted)
filebeat root 846r REG , /var/log/audit/audit.log. (deleted)
filebeat root 847r REG , /var/log/audit/audit.log. (deleted)
filebeat root 848r REG , /var/log/audit/audit.log. (deleted)
filebeat root 849r REG , /var/log/audit/audit.log. (deleted)
filebeat root 850r REG , /var/log/audit/audit.log. (deleted)
filebeat root 851r REG , /var/log/audit/audit.log. (deleted)
filebeat root 852r REG , /var/log/audit/audit.log. (deleted)
filebeat root 853r REG , /var/log/audit/audit.log. (deleted)
filebeat root 854r REG , /var/log/audit/audit.log. (deleted)
filebeat root 855r REG , /var/log/audit/audit.log. (deleted)
filebeat root 856r REG , /var/log/audit/audit.log. (deleted)
filebeat root 857r REG , /var/log/audit/audit.log. (deleted)
filebeat root 858r REG , /var/log/audit/audit.log. (deleted)
filebeat root 859r REG , /var/log/audit/audit.log. (deleted)
filebeat root 860r REG , /var/log/audit/audit.log. (deleted)
filebeat root 861r REG , /var/log/audit/audit.log. (deleted)
filebeat root 862r REG , /var/log/audit/audit.log. (deleted)
filebeat root 863r REG , /var/log/audit/audit.log. (deleted)
filebeat root 864r REG , /var/log/audit/audit.log. (deleted)
filebeat root 865r REG , /var/log/audit/audit.log. (deleted)
filebeat root 866r REG , /var/log/audit/audit.log. (deleted)
filebeat root 867r REG , /var/log/audit/audit.log. (deleted)
filebeat root 868r REG , /var/log/audit/audit.log. (deleted)
filebeat root 869r REG , /var/log/audit/audit.log. (deleted)
filebeat root 870r REG , /var/log/audit/audit.log. (deleted)
filebeat root 871r REG , /var/log/audit/audit.log. (deleted)
filebeat root 872r REG , /var/log/audit/audit.log. (deleted)
filebeat root 873r REG , /var/log/audit/audit.log. (deleted)
filebeat root 874r REG , /var/log/audit/audit.log. (deleted)
filebeat root 875r REG , /var/log/audit/audit.log. (deleted)
filebeat root 876r REG , /var/log/audit/audit.log. (deleted)
filebeat root 877r REG , /var/log/audit/audit.log. (deleted)
filebeat root 878r REG , /var/log/audit/audit.log. (deleted)
filebeat root 879r REG , /var/log/audit/audit.log. (deleted)
filebeat root 880r REG , /var/log/audit/audit.log. (deleted)
filebeat root 881r REG , /var/log/audit/audit.log. (deleted)
filebeat root 882r REG , /var/log/audit/audit.log. (deleted)
filebeat root 883r REG , /var/log/audit/audit.log. (deleted)
filebeat root 884r REG , /var/log/audit/audit.log. (deleted)
filebeat root 885r REG , /var/log/audit/audit.log. (deleted)
filebeat root 886r REG , /var/log/audit/audit.log. (deleted)
filebeat root 887r REG , /var/log/audit/audit.log. (deleted)
filebeat root 888r REG , /var/log/audit/audit.log. (deleted)
filebeat root 889r REG , /var/log/audit/audit.log. (deleted)
filebeat root 890r REG , /var/log/audit/audit.log. (deleted)
filebeat root 891r REG , /var/log/audit/audit.log. (deleted)
filebeat root 892r REG , /var/log/audit/audit.log. (deleted)
filebeat root 893r REG , /var/log/audit/audit.log. (deleted)
filebeat root 894r REG , /var/log/audit/audit.log. (deleted)
filebeat root 895r REG , /var/log/audit/audit.log. (deleted)
filebeat root 896r REG , /var/log/audit/audit.log. (deleted)
filebeat root 897r REG , /var/log/audit/audit.log. (deleted)
filebeat root 898r REG , /var/log/audit/audit.log. (deleted)
filebeat root 899r REG , /var/log/audit/audit.log. (deleted)
filebeat root 900r REG , /var/log/audit/audit.log. (deleted)
filebeat root 901r REG , /var/log/audit/audit.log. (deleted)
filebeat root 902r REG , /var/log/audit/audit.log. (deleted)
filebeat root 903r REG , /var/log/audit/audit.log. (deleted)
filebeat root 904r REG , /var/log/audit/audit.log. (deleted)
filebeat root 905r REG , /var/log/audit/audit.log. (deleted)
filebeat root 906r REG , /var/log/audit/audit.log. (deleted)
filebeat root 907r REG , /var/log/audit/audit.log. (deleted)
filebeat root 908r REG , /var/log/audit/audit.log. (deleted)
filebeat root 909r REG , /var/log/audit/audit.log. (deleted)
filebeat root 910r REG , /var/log/audit/audit.log. (deleted)
filebeat root 912r REG , /var/log/audit/audit.log. (deleted)
java tnuser 93r REG , /data//cassandra/data/user_group_store/sg_friends/user_group_store-sg_friends-jb--Data.db (deleted)
java tnuser 142r REG , /data//cassandra/data/user_group_store/sg_friends/user_group_store-sg_friends-jb--Index.db (deleted)
4. 根据lsof列出的进程号，kill这些进程,稍等片刻,再查看磁盘容量使用情况,注意如果不熟悉进程的作用,请不要随意kill
# kill -
# df -h
Filesystem Size Used Avail Use% Mounted on
/dev/xvde1 .9G .3G .1G % /
none .4G 16K .4G % /dev/shm
原理:
在linux上被删除的文件仍被其他进程所使用，文件句柄没有完全释放出来，导致空间无法释放出来,在Linux或者Unix系统中，通过rm或者文件管理器删除文件将会从文件系统的目录结构上解除链接(unlink).然而如果文件是被打开的（有一个进程正在使用），那么进程将仍然可以读取该文件，磁盘空间也一直被占用。
解决：
一、通过lsof |grep deleted查看被占用文件
二、释放被占用文件磁盘空间
- kill掉相应的进程
- 停掉使用这个文件的应用，让os自动回收磁盘空间
linux删除文件后不释放磁盘的问题的更多相关文章
- linux 删除文件后 df 查看磁盘空间并没有释放
1.错误现象 Linux 磁盘空间总是报警,查到到大文件,删除之后,df看到磁盘空间并没有释放. 用du -sh ./* | sort -nr (查看当前目录下文件的大小)通过查找了下发现文件被mys ...
- linux删除文件后没有释放空间
转载 http://blog.csdn.net/wyzxg/article/details/4971843 今天发现一台服务器的home空间满了,于是要清空无用的文件,当我删除文件后,发现可用空间没有 ...
- 解决linux删除文件后空间没有释放问题
linux删除文件后沒有释放空间 今天发现一台服务器的home空间满了,于是要清空没用的文件,当我删除文件后,发现可用空间沒有变化 os:centos4.7 现象: 发现当前磁盘空间使用情况: [ro ...
- Linux 删除文件后空间不释放【原创】
删除MySQL备份文件后,查找文件所在目录发现文件已经备删除了,但是空间没有释放,还是83% 解决方法: lsof|grep -i delete 发现进程还在,杀掉进程 kill -9 5377 再次 ...
- linux 删除文件后空间没有释放的解决办法
清空没用的文件,当我删除文件后,发现可用空间沒有变化 os:centos4.7 现象: 发现当前磁盘空间使用情况: [root@ticketb ~]# df -hFilesystem ...
- Linux删除文件后磁盘目录不释放
今天测试oracle数据库的时候,把表空间连带内容和数据文件一并删除了,但是删除之后,查看数据文件不存在了,但是目录的带下没有释放 SQL> drop tablespace users incl ...
- Linux删除文件后空间不释放
最近线上 elasticsearch 由于磁盘空间不足报错,于是乎对磁盘进行了分析,删除了一些 Tomcat 日志文件,但是删除后发现并没有磁盘空间释放.于是 google 了一下. 原来在Linux ...
- linux删除文件后，空间未释放的一种情况，使用lsof查看
linux某个目录空间快满了,删除了若干的文件后,使用df -h显示还是快满的,但是df -h *显示的总的文件大小又没那么大. 某个进程正在使用删除的文件,导致删除后,空间仍然不能释放. 查看rm掉 ...
- linux删除文件后沒有释放空间
在Linux或者Unix系统中,通过rm或者文件管理器删除文件将会从文件系统的文件夹结构上解除链接(unlink).然而假设文件是被 打开的(有一个进程正在使用),那么进程将仍然能够读取该文件,磁盘空 ...
随机推荐
- Kylin简介
来源 Cube: 用空间换时间(类似:BI分析) 预计算把用户需要查询的维度以及他们所对应的考量的值,存储在多维空间里 当用户查询某几个维度的时候,通过这些维度条件去定位到预计算的向量空间,通过再聚合 ...
- strlen函数，strcat函数，strcpy函数，strncpy函数，strcmp函数
strcpy函数: char *strcpy(char *Dest , const char *Src) { assert((Dest != NULL) && (Src != NULL ...
- 51nod 1366 贫富差距（flody）
http://www.51nod.com/onlineJudge/questionCode.html#!problemId=1366 题意: 思路: 如果不是一个连通块的话,肯定是无穷大的. 用flo ...
- Java中泛型Class<T>、T与Class<?>、 Object类和Class类、 object.getClass()和Object.class
一.区别 单独的T 代表一个类型(表现形式是一个类名而已) ,而 Class<T>代表这个类型所对应的类(又可以称做类实例.类类型.字节码文件), Class<?>表示类型不确 ...
- UIUseImgWindow
using System;using UnityEngine;using UnityEngine.UI;using UnityEditor;using System.Collections;using ...
- Django中ORM简介与单表数据操作
一. ORM简介 概念:.ORM框架是用于实现面向对象编程语言种不同类型系统的数据之间的转换 构建模型的步骤:重点 (1).配置目标数据库信息,在seting.py中设置数据库信息 DATABASE ...
- socket之基础
链接https://www.cnblogs.com/clschao/articles/9593164.html
- Discrete Log Algorithms ：Baby-step giant-step 【二】
import gmpy2 def discreteLog(g,p,a): #离散对数,求 g^x=a mod p中的x table={} sq=gmpy2.isqrt(p-1) m=gmpy2.add ...
- 整数m去掉n位后剩下最大（小）值
题目描述 给定一个正整数(<=255位),从中删去n位后,使得剩下的数字组成的新数最小(大): 思路:从左到右开始扫描,两两比较,如果是前一位比后一位大,则删去前大的一位,直到删完所有的n位: ...
- win10 cmake编译 opencv4.0 + pyhton3.7x64
在超极本上本来不想编译了,反正没有cuda.但发现即使下载的opencv_contrib也不包含sift等等nonfree库了,要自己编译开编译选项才可以.坑啊,自己编译吧.反正opencv已经这么庞 ...