What a mess! VCSA cannot be updated anymore or is stuck because of a full root Partition.

Luckily there are straightforward procedures to investigate what files are filling the root partition and how to get rid of them.

Typical symptoms?

  • ISO staging of the update fails
  • vCSA update fails at step #/#
  • some vCSA services cannot be started

Filesystem check

Log into your VCSA console, enable the shell and open the shell.

shell.set –enabled true
df -h

VCSA root partition full

Ignore the Use % number in the screenshot above, as the partition has been cleaned up already. But any number higher than 95% will stop your update procedure.

When using Performance Analyzer we have a special Highlights dashboard for VM partitions, that can be used to check the partition utilization as well.

Performance Analyzer / check vCSA partition

Please download the dashboard here, to import it into Performance Analyzer: DownloadMore information at

How to resize the partition

If you don’t want to make your hands dirty and clean up the partition, you can resize the related virtual disk and partition by following this KB article:

The big issue here is, that you just postpone the file cleanup until the partition fills up again.

How to clean up the partition


In case the audit.log is filling the partition, the task is quite simple and described in the following KB article:

  1. cd /var/log/audit
  2. ls -lh
  3. rm -rf audit.log

Check the KB article for all steps to make sure the audit.log is not filling up again.


Another possible reason for a filled up partition are files in /var/spool/mqueue – a less documented situation.

In general, you can use the following command to find the largest directories checking the current and the first subdirectory: df -h -d1

  1. df -h -d1 /var
  2. if it’s /var/log that is very big, check the audit.log solution
  3. if it’s /var/spool, continue here
  4. find /var/spool/mqueue -name "*" -delete

The reason to use find and delete instead of rm is, that most of the time /var/spool/mqueue contains to many files to be handled by rm.

Check the partitions again using df -h and restart the appliance if needed.

Btw. You should consider creating a snapshot before deleting any files

Metrics and Logs

(formerly, Opvizor Performance Analyzer)

VMware vSphere & Cloud

Monitor and Analyze Performance and Log files:
Performance monitoring for your systems and applications with log analysis (tamperproof using immudb) and license compliance (RedHat, Oracle, SAP and more) in one virtual appliance!

Subscribe to Our Newsletter

Get the latest product updates, company news, and special offers delivered right to your inbox.
Share on twitter
Share on linkedin
Share on facebook
Share on email

Subscribe to our newsletter

White Paper — Registration

We will send you the research paper via email.

CodeNotary — Webinar

White Paper — Registration

Please let us know who you are, so we can send you the CodeNotary Trusted Software Supply Chain white paper.

Become a partner

Start Your Trial

Please enter contact information to receive an email with the virtual appliance download instructions.

Start Free Trial

Please enter contact information to receive an email with the free trial details.