Getting DISKWARN on var

[globalexposures]

Lately I'm getting server messages that say: The file system /dev/sda3, which is mounted at /var, has reached warn status because it is 83% full.

Tech support says "This seems to be generated from the spam filtering of email traffic on the server."

What about the files in /var/log/sa ?
This has only been a problem in the last month, so I’m trying to figure out what is different.

The biggest files seem to be in /var/log/audit
They are large audit logs from the last month

These warnings just started in the last couple of weeks. What should I do to prevent this? Is there a setting that will rotate logs in mailscanner?

[Sergio]

Run the following command as root:

du -hx --max-depth=1 /var | sort -k1 -rn

that will show you what directory is taking the most space and paste the info.

Sergio