Red Hat Enterprise Linux (RHEL) version 7 x64 running Syslog-ng PE 6.x has a known issue where the /run tmpfs file system will become 100% full.
原因
Syslog-ng PE version 6.x running on RHEL version 7 x64 has many open files marked deleted that are not being released which causes the /run directory to become 100% full.
解决办法
Syslog-ng PE needs to be upgraded to version 7.x in which the defect has been fixed.
There is no workaround for this issue on Syslog-ng PE version 6.x.