System Administration Guide
Chapter 5, Maintaining system security

Audit: filesystem is getting full

Audit: filesystem is getting full

The audit subsystem may occasionally display this warning when the audit filesystem reaches a certain threshold. This warning message indicates that space is low on a particular device. If additional directories were specified to the subsystem, it automatically switches when the filesystem has reached the threshold value for remaining free space. Otherwise, the administrator must intervene to make more space available. If not, auditing is terminated when the threshold value is reached. The audit daemon program auditd may terminate for the same reason. If unable to write a compaction file because of insufficient space or an I/O error, auditd terminates. Use the Disable selection of the Audit Manager to terminate auditing if it has not already been done. Analyze the source of the problem and solve it before re-enabling auditing.