From 7e8cc1f9de378a1fa9c0510836d1633be6d3396c Mon Sep 17 00:00:00 2001
From: Seunghun Lee <seunghun@stackhpc.com>
Date: Thu, 29 May 2025 16:48:02 +0100
Subject: [PATCH] Add doc about big audit.log file after Ubuntu upgrade

---
 doc/source/operations/ubuntu-noble.rst | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/doc/source/operations/ubuntu-noble.rst b/doc/source/operations/ubuntu-noble.rst
index 22edf30b8..7cc2b918e 100644
--- a/doc/source/operations/ubuntu-noble.rst
+++ b/doc/source/operations/ubuntu-noble.rst
@@ -530,6 +530,15 @@ Full procedure
 Post Upgrade works
 ==================
 
+Audit log
+---------
+
+With the reboot, an audit file ``audit.log`` can take most of sotrage
+of ``/var/log/audit/``.
+It can trigger ``LowDiskSpace`` alert from Prometheus if the directory
+is mounted to its own partition.
+But this is expected behaviour.
+
 Deploy Ubuntu Noble Kolla containers
 ------------------------------------