pfSense

Syslogd appears to be failing to release file handlers at rotation (or otherwise) resulting in increasing file system usage over time.

This is particularly an issue in systems with RAM disks enabled where /var can become filled entirely and services start to fail.

Restarting syslogd clears the excess files.

[25.03-BETA][admin@5100.stevew.lan]/root: ps -auxww | awk '{print $2}' | grep -v PID | xargs procstat -f | grep var | wc -l
procstat: sysctl(kern.proc): No such process
procstat: procstat_getprocs()
   12102
[25.03-BETA][admin@5100.stevew.lan]/root: ps -auxww | awk '{print $2}' | grep -v PID | xargs procstat -f | grep var | wc -l
procstat: sysctl(kern.proc): No such process
procstat: procstat_getprocs()
     169

Seen in 25.03 and 2.8.