Why is ABRT is deleting the coredumps with the message : "abrtd: Size of '/var/spool/abrt' > = 1000

Environment

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Automatic Bug Reporting Tool (ABRT)

Issue

• ABRT is deleting the coredumps with the message : "abrtd: Size of '/var/spool/abrt' > = 1000 MB" .

  Raw

  abrtd: Size of '/var/spool/abrt' >= 1000 MB, deleting 'ccpp-2012-12-21-08:45:35-2047'
  

Resolution

• Set "MaxCrashReportsSize" parameter value in abrt.conf file to unlimited.

• Change the MaxCrashReportSize if core size is huge than allocated size.

  • As well as, set the crash storage to unlimited by setting the MaxCrashReportsSize value to 0.
  • But note that it might sometimes cause issue as, it will fill the core to maximum available disk size. So, it is recommend to increase the value something less than disk size.

• /etc/abrt/abrt.conf

Raw

# Max size for crash storage [MiB] or 0 for unlimited
#
MaxCrashReportsSize = 1000

# Changing dump location could cause problems with SELinux. See man abrt_selinux(8).
#
#DumpLocation = /var/spool/abrt

Root Cause

• By default, the maximum disk space that abrt will use to collect all the crash dumps and problem data is 1000 MB. This is set in /etc/abrt/abrt.conf.

• Product(s) 
• Red Hat Enterprise Linux

• Component 
• abrt

• Category 
• Configure

• Tags 
• abrt 
• configuration 
• rhel_6

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

转载至https://access.redhat.com/solutions/719463