If I run iostat -x 1 I saw ocassionally large 5MB to 10MB writes.
What files are being written?
I want to check the recently created files with size over 5MB for example.
How would I do so?
Find file modified within X minute under /path
Example: find all files in /var/log (including sub-dir) modified within last 30min
Find file with size bigger X under /path
Example: find all files in /var/log (including sub-dir) bigger than 50k
Example: find all files in /var/log (including sub-dir) bigger than 50k modified within last 30min
If you want to include 50k in your result, change to
PS: Avoid doing
The altenative on a recent linux system is inotify. In that case the kernel watches for file system changes as they happen and you can query them for example with
The inotify approach does not work well when recursively monitoring large directory trees. In that case