Originally posted by: tips_luo

Could anybody tell me what is the function of /usr/local/asert/sbin/loginlog please? I compress the /var/adm/wtmp, but the space is not release. I execute "fuser -d wtmp" and find the wtmp.Z is still openned by loginlog. I don't know whether I can kill this process to release the space. I check other server of 5300-10, there is no this process running. Could anybody advise how I can release the space from /var? Thank you very much.
#AIX-Forum

Originally posted by: unixgrl

I think you are going to have to figure this one out on your own.
AIX doesn't put things in /usr/local by default. Is this some
third-party or internally developed app?

I'd be checking fuser, lsof, system startup scripts, config files and crontabs
to see what is using this.
#AIX-Forum

Originally posted by: nh4aix

Hi there.. I agree with the previous post about /usr/local ... I am no help there.. but wtmp file can be reduce.. you can't remove it or compress it but you can cat /dev/null to it to zero it out...

There is a pretty good article in the Info Center on this:

http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.baseadmn/doc/baseadmndita/fsvarover.htm?resultof=%22%77%74%6d%70%22%20

Good Luck...
#AIX-Forum

Originally posted by: dmj12031

I believe that is an internal IBM security monitoring tool.

p.s. - always a good idea to check if a file is open before compressing, deleting or moving.
#AIX-Forum