Thanks Boris. looks like iwserver has most of the files open on the server - [root@dctlap-ts02 ~]# ps -ef | grep iwserver.linuxroot 17006 13406 0 10:21 pts/0 00:00:00 grep iwserver.linuxiwts 27259 1 0 Dec18 ? 00:00:00 bash -c (echo 'STARTING: \c'; date; iwserver.linux -e "/var/log/Interwoven/TeamSite/iwevents.log" /data/Interwoven/iw-store; echo 'EXITED: \c'; date) 1>>"/var/log/Interwoven/TeamSite/iwtrace.log" 2>&1 &iwts 27263 27259 10 Dec18 ? 1-02:34:06 iwserver.linux -e /var/log/Interwoven/TeamSite/iwevents.log /data/Interwoven/iw-store[root@dctlap-ts02 ~]#[root@dctlap-ts02 ~]#[root@dctlap-ts02 ~]# lsof -p 27263 | wc -l711[root@dctlap-ts02 ~]#