Find the top 10 for the large files in /var
du -a /var | sort -n -r | head -n 10
If below log too large we can clean it without delete
/var/log/audit/audit.log
truncate -s 0 audit.log
Check the cron job last run date
ls -l /var/spool/cron/lastrun/
Maybe root password expired
chage -l root
chage -m 0 -M 99999 root
Clean old password remember
true > /etc/security/opasswwd