How to Find Which Process Is Filling a Linux Filesystem

A filesystem can fill rapidly from logs, temporary files, deleted-but-open files, caches, or an application writing unexpected data.

Checks to make

Check filesystem and inode usage, identify largest directories, inspect open deleted files, and correlate growth with process and log timestamps. Preserve needed evidence and avoid deleting files blindly while a service is writing them.

When to get help

Linux administration can locate growth sources and improve capacity alerts. Informatix Systems can assess the symptoms, evidence, and next steps. Contact Informatix Systems to discuss this issue.