Page 1 of 1

messges about "deleted log table entries"

Posted: Fri Apr 03, 2020 11:27 pm
by jamby
Hi
I only have 139 events showing. But my /var/log/messages file has this message repeated
"zmaudit[3966]: INF [Deleted 10 log table entries by time]" around 50 lines of that every 30 minutes.
centos 7 current

any idea what is causing this?

Thanks
Jim

Re: messges about "deleted log table entries"

Posted: Sat Apr 04, 2020 2:25 pm
by jamby
Hello again
I found a run_audit on the options page (3/4 down) and turned that off. That appears to have stopped the lines from being printed in the log file. I'll set up a cron.weekly later and see if that will run correctly.

I'd still like to know why it output so many lines each time (50+).

If run_audit from the command line a user then it produces 50+ lines, run sudo it produces 5.

Thanks
Jim

Re: messges about "deleted log table entries"

Posted: Sat Apr 04, 2020 3:01 pm
by iconnor
Deleting a ton of lines takes forever and locks the table so that nothing can write to it. So we only delete a few lines at a time.