Last modified: 2014-10-16 00:57:42 UTC
I noticed 'acct' generates log files under /var/log/account/ which is on a 2GB partition. It is log rotated via a daily cron /etc/cron.daily/acct , keeping the last day uncompressed. On deployment-bastion.eqiad.wmflabs that is 542MB currently, or a quarter of /var/ available disk space. /etc/default/acct has an option to change the number of day to be kept: # Amount of days that the logs are kept. ACCT_LOGGING="30" Maybe we can reduce it to 15 days?
The package is acct which is part of of our standard packages installed via puppet. It provides data for commands such as 'ac' or 'lastcomm'.
Change 164520 had a related patch set uploaded by Hashar: labs: reduce acct archiving retention https://gerrit.wikimedia.org/r/164520
+bd808 +jeremyb
Change 164520 merged by Dzahn: labs: reduce acct archiving retention https://gerrit.wikimedia.org/r/164520