Zoneminder 1.34.15 keeps deleting events before hitting 95% disk full

[ebeng]

Hi all,

I am using the following script in viewtopic.php?f=9&t=27537&p=115886#p115886 to capture the video.

I am running now Zoneminder 1.34.15

For these events which are created by this script, are automatically deleted after 1 whole day.
The events which are created by Zoneminder itself, are not deleted after 1 whole day.

As you can see also in the logs here below, these events are deleted by www-data and not the root, which is running with ROOT user.

Code: Select all

ubuntu@zoneminder_v18:~$ grep 323704 /var/log/audit/audit.log
type=PATH msg=audit(1592224034.271:1651): item=0 name="/var/cache/zoneminder/events/1/2020-06-14/323704/" inode=46923778 dev=fd:00 mode=040755 ouid=33 ogid=33 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1592224034.271:1652): item=0 name="/var/cache/zoneminder/events/1/2020-06-14/323704/" inode=46923778 dev=fd:00 mode=040755 ouid=33 ogid=33 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1592224073.251:1687): item=0 name="/var/cache/zoneminder/events/1/2020-06-14/323704/" inode=46923778 dev=fd:00 mode=040755 ouid=33 ogid=33 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1592224073.255:1688): item=0 name="/var/cache/zoneminder/events/1/2020-06-14/323704/" inode=46923778 dev=fd:00 mode=040755 ouid=33 ogid=33 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1592224549.018:1725): item=0 name="/var/cache/zoneminder/events/1/2020-06-14/323704" inode=46923778 dev=fd:00 mode=040755 ouid=33 ogid=33 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1592224549.018:1726): item=0 name="/var/cache/zoneminder/events/1/2020-06-14/323704" inode=46923778 dev=fd:00 mode=040755 ouid=33 ogid=33 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CONFIG_CHANGE msg=audit(1592224549.018:1727): auid=4294967295 ses=4294967295 op=updated_rules path="/var/cache/zoneminder/events/1/2020-06-14/323704/323704-video.mp4" key=(null) list=4 res=1
type=PATH msg=audit(1592224549.018:1728): item=1 name="323704-video.mp4" inode=13505121 dev=fd:00 mode=0100644 ouid=33 ogid=33 rdev=00:00 nametype=DELETE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CONFIG_CHANGE msg=audit(1592224549.134:1729): auid=4294967295 ses=4294967295 op=remove_rule path="/var/cache/zoneminder/events/1/2020-06-14/323704/323704-video.mp4" key=(null) list=4 res=1
type=PATH msg=audit(1592224549.126:1730): item=1 name="/var/cache/zoneminder/events/1/2020-06-14/323704" inode=46923778 dev=fd:00 mode=040755 ouid=33 ogid=33 rdev=00:00 nametype=DELETE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0

Code: Select all

ubuntu@zoneminder_v18:~$ id -u www-data
33

Code: Select all

trending_up Load: 4.75 storage DB:19/151 Storage: Default: 13% /dev/shm: 39%

[iconnor]

there are 3 places that do deletes
#1 a filter. Filters run as www-data
#2 zmaudit.pl. You should not be running this anymore. Check options->SYstem->ZM_AUDIT. Turn it off. This is the likely culprit.
#3 someone using the web interface to delete the events. This seems unlikely.

[ebeng]

there are 3 places that do deletes
#1 a filter. Filters run as www-data
#2 zmaudit.pl. You should not be running this anymore. Check options->SYstem->ZM_AUDIT. Turn it off. This is the likely culprit.
#3 someone using the web interface to delete the events. This seems unlikely.

Do you mean:

Code: Select all

RUN_AUDIT  : Run zmaudit to check data consistency (?)

[ebeng]

Only 'unchecking' the ZMAUDIT is not helping, you have to restart the Zoneminder also

This was indeed the one, which was deleting it. My events are now filling up with the recordings, without being deleted!!

Thank you !!