Disk space disappears, how to find the culprit?

Question

VMware

esxi host present. A VM is running on one of the datastores. In which there is a thick disk with all the consequences, 99% of the datastore is occupied. The log file swelled to such an extent (5GB) that I had to delete it. Every 5 minutes, something swells up and eats 1m. Through the du-sh console on the VM, it does nothing, since the occupied space does not change. Where to dig I do not know. I would look at the log file, but it's not there. The VM cannot be rebooted at the moment.

Answer 1

It looks like the so-called "digital yeast" has somehow got onto your disk.

Answer 2

Look at iostat for loading IO disks, then look at iotop - which process is eating IO. In vain, of course, you deleted the log file. Is there any database on the disk by any chance? And check for any malware with rootkits.