Why is ABRT is deleting the coredumps with the message : "abrtd: Size of '/var/spool/abrt' > = 1000

最新推荐文章于 2025-07-14 14:08:15 发布

转载最新推荐文章于 2025-07-14 14:08:15 发布 · 2.4k 阅读

Linux KB 专栏收录该内容

35 篇文章

订阅专栏

本文介绍了解决ABRT（Automatic Bug Reporting Tool）在Red Hat Enterprise Linux中因/var/spool/abrt目录达到默认最大1000MB限制而删除核心转储文件的问题。通过调整abrt.conf文件中的MaxCrashReportsSize参数可以解决该问题。

Environment

Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Automatic Bug Reporting Tool (ABRT)

Issue

ABRT is deleting the coredumps with the message : "abrtd: Size of '/var/spool/abrt' > = 1000 MB" .
Raw
```
abrtd: Size of '/var/spool/abrt' >= 1000 MB, deleting 'ccpp-2012-12-21-08:45:35-2047'
```

Resolution

Set "MaxCrashReportsSize" parameter value in abrt.conf file to unlimited.
Change the MaxCrashReportSize if core size is huge than allocated size.
- As well as, set the crash storage to unlimited by setting the MaxCrashReportsSize value to 0.
- But note that it might sometimes cause issue as, it will fill the core to maximum available disk size. So, it is recommend to increase the value something less than disk size.
/etc/abrt/abrt.conf

# Max size for crash storage [MiB] or 0 for unlimited
#
MaxCrashReportsSize = 1000

# Changing dump location could cause problems with SELinux. See man abrt_selinux(8).
#
#DumpLocation = /var/spool/abrt

Root Cause

By default, the maximum disk space that abrt will use to collect all the crash dumps and problem data is 1000 MB. This is set in /etc/abrt/abrt.conf.

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

转载至https://access.redhat.com/solutions/719463