Доброго дня
Ubuntu 18,04 server неожиданно кончилось место на диске
расследование показало что все место занял syslog с подобными записями
snapd[842]: udevmon.go:190: udev monitor observed remove event for unknown device "/sys/kernel/slab/sock_inode_cache/cgroup/sock_inode_cache(622:rsyslog.service$
snapd[842]: udevmon.go:190: udev monitor observed remove event for unknown device "/sys/kernel/slab/shmem_inode_cache/cgroup/shmem_inode_cache(622:rsyslog.servi$
snapd[842]: udevmon.go:190: udev monitor observed remove event for unknown device "/sys/kernel/slab/:A-0000256/cgroup/filp(622:rsyslog.service)"
snapd[842]: udevmon.go:190: udev monitor observed remove event for unknown device "/sys/kernel/slab/inode_cache/cgroup/inode_cache(622:rsyslog.service)"
snapd[842]: udevmon.go:190: udev monitor observed remove event for unknown device "/sys/kernel/slab/:A-0005952/cgroup/task_struct(622:rsyslog.service)"
snapd[842]: udevmon.go:190: udev monitor observed remove event for unknown device "/sys/kernel/slab/:A-0000208/cgroup/vm_area_struct(622:rsyslog.service)"
snapd[842]: udevmon.go:190: udev monitor observed remove event for unknown device "/sys/kernel/slab/:A-0002112/cgroup/mm_struct(622:rsyslog.service)"
snapd[842]: udevmon.go:190: udev monitor observed remove event for unknown device "/sys/kernel/slab/:0000512/cgroup/kmalloc-512(622:rsyslog.service)"
snapd[842]: udevmon.go:190: udev monitor observed remove event for unknown device "/sys/kernel/slab/:0000256/cgroup/kmalloc-256(622:rsyslog.service)"
snapd[842]: udevmon.go:190: udev monitor observed remove event for unknown device "/sys/kernel/slab/:A-0000064/cgroup/pid(622:rsyslog.service)"
snapd[842]: udevmon.go:190: udev monitor observed remove event for unknown device "/sys/kernel/slab/:A-0000192/cgroup/cred_jar(622:rsyslog.service)"
snapd[842]: udevmon.go:190: udev monitor observed remove event for unknown device "/sys/kernel/slab/anon_vma/cgroup/anon_vma(622:rsyslog.service)"
snapd[842]: udevmon.go:190: udev monitor observed remove event for unknown device "/sys/kernel/slab/:0000008/cgroup/kmalloc-8(622:rsyslog.service)"
вопрос как это можно поправить или ограничить сислог мегабайт на 100