HDD fills up during a DDoS attack, what should I do?

Question

linux

The site has had DDoS attacks. Usual http flood
When attacked, the SDD is filled. I don’t know why this is so .. The
/proc folder is being filled, there are oversized files that weigh 0b, the kcore file takes up a lot of space on the order of 1tb, but in the north there are only 160gb ssd (google says that this is normal and this file is system).
OS: CentOS7
After connecting the protection, the size of the disk does not grow, as before
Question: how to clear the place that was ddosed (it's about 70gb)?

Answer 1

/proc is a virtual file system and does not occupy anything physically on the disk. Find out what is really taking up space.
Run the command
Go to the thickest directory and repeat this command until you find the full directory.
Most likely overflow in /var/log

Answer 2

Clean up the logs?