Problem:
Enhanced security appliances will fail to update the audit daemon if the /var/log/audit directory is at 100% usage.
Possible resolution:
Console or SSH into the appliance as the standard friend / ec2-user / azureuser credentials and run the following commands to clear the filesystem:
sudo bash
systemctl kill auditd
systemctl status auditd
rm -f /var/log/audit/*data
rm -f /var/log/audit/*log
df -h /var/log/audit
systemctl start auditd
lwl
After running lwl to bring up the Liquidware menu, choose U, U options to re-run the upgrade. The appliance should reboot and reflect the new version / build number when it starts up.
Product: Stratusphere FIT/UX
Product Version: All
Expires on: 365 days from publish date
Updated: July 24, 2025