Log rotation problems (?) after pfSense+ update(s)

[the_jest]

I've been running pfSense+ on a Netgate 5100 for a number of years; for most of that time it's been very stable, and I make only minor changes to my setup.

I hadn't updated the software for some time, so a few months ago I systematically updated to pfSense+ 24.11. This involved two or three separate update steps, one version at a time. I didn't make any changes to the configuration at all. Everything worked fine and has continued to do so, with one exception.

I generally pay only slight attention to the disk usage on my dashboard, but I did notice that the disk has been filling up, where previously it remained stable at some low percentage. This seems to happen in large jumps, every day or three. When I first noticed, it was at 53%, then after a few days it went to 65%; it's now at 88% and I'm getting worried.

I assume that something changed with a log rotation issue or setting? How do I figure this out? In general whatever the previous setting was, was fine--I don't care about offloading any old data, and I'm not doing anything fancy.

[SteveITS]

@the_jest check for this :
https://docs.netgate.com/pfsense/en/latest/troubleshooting/filesystem-shrink.html

Otherwise, what is using the space? “du -hd1 /“ in a shell prompt and then repeat for large subdirectories.

[stephenw10]

If you have Snort or Suricata installed make sure the log settings for those are saved as something useful.