OK, suppose we can monitor disk full events in short future, but how to solve the core issue? Change the program to use director other than /tmp?
Common strategies: - have program close and re-open logs and use logrotate - (for stdout) have program terminate regularly, with a cron job to restart
Hope that helps, Daniel