VCSA storage/core at 100% – core.in:imfiles

There is a know bug in VCSA 6.7 and 7.0 where core.in:imfiles fill up /storage/core. This issue was fixed with vSphere 7 Update 3c, however you may still need a workaround. This strange issue hit my vCenter Server which is on version 7.0 Update 2d. The tech support said they never saw a client being on version 7.x with this issue. I was the first one.

The natural question was why just not to update to version 7.0 U3c? The answer is simply: there is no room. I need to fix the storage issue first.

If you like me were victim of this bug, please follow the steps to remediate the issue:

  • SSH to you VCSA.
  • Make a copy of postgers-archiver.conf file
cp /etc/vmware-syslog/vmware-services-vmware-postgres-archiver.conf /etc/vmware-syslog/vmware-services-vmware-postgres-archiver.conf.orig
  • Edit the file using VI:
/etc/vmware-syslog/vmware-services-vmware-postgres-archiver.conf
  • Remove the existing content and replace with the below:
# vmware-postgres-archiver logs
input(type="imfile"
File="/var/log/vmware/vpostgres/pg_archiver.log.stdout"
Tag="postgres-archiver"
Severity="info"
Facility="local0")
input(type="imfile"
File="/var/log/vmware/vpostgres/pg_archiver.log.stderr"
Tag="postgres-archiver"
Severity="info"
Facility="local0")
  • Restart rsyslog:
systemctl restart rsyslog
  • Check the status of rsyslog:
systemctl status rsyslog
  • Remove imfile:
cd /storage/core/
ls -l
rm core.in\:imfile.*

Please like and share to spread the knowledge in the community.

If you want to chat with me please use Twitter: @AngrySysOps

Visit my FB page: https://www.facebook.com/AngrySysOps

Read my blog: https://angrysysops.com

Subscribe to my channel : https://www.youtube.com/channel/UCRTcKGl0neismSRpDMK_M4A

Please leave the comment