I had an issue with /var running low on space despite it only appearing to have only 2 gigs of files allocated on the 5 gig partition. I determined the issue was that /var/log/messages was deleted but still open by rsyslog and was at 2.88 gigs.
I was able to resolve the issue for now by restarting rsyslog, thus releasing the 2.8 gig file to be properly deleted. However, I want to know how it got into this state to being with. Shouldn't rsyslog be automatically rotating files to prevent the log growing indefinitely? Is there something I can do to prevent this from happening again in the future?