How to troubleshoot space issues related to the event log volumes

If volumes containing event log files run out of space, auditing cannot convert log records into log files. This results in client access failures. You need to know how to troubleshoot space issues related to event log volumes.

• Storage Virtual Machine (SVM) and cluster administrators can determine whether there is insufficient volume space by displaying information about volume and aggregate usage and configuration.
• If there is insufficient space in the volumes containing event logs, SVM and cluster administrators can resolve the space issues by either removing some of the event log files or by increasing the size of the volume.
  Note: If the aggregate that contains the event log volume is full, then the size of the aggregate must be increased before you can increase the size of the volume. Only a cluster administrator can increase the size of an aggregate.
• The destination path for the event log files can be changed to a directory on another volume by modifying the auditing configuration.

For more information about viewing information about volumes and increasing volume size, see the Clustered Data ONTAP Logical Storage Management Guide.

For more information about viewing information about aggregates and managing aggregates, see the Clustered Data ONTAP Physical Storage Management Guide.