RTCReporting file growing uncontrollably and consuming disk space and CPU

On my MacBook Pro M1 (2020), running macOS 15.3.1, I keep encountering an issue with a hidden system file named RTCReporting located in the root directory. Over time, this file grows uncontrollably—sometimes exceeding 60 GB—which gradually fills up my disk.


In addition to consuming disk space, it also causes noticeable CPU usage. The associated process is rtcreportingd, which appears to recreate the file automatically even after I delete it manually using sudo.


I’ve tried removing the file, but it reappears after every reboot. I don’t have any external devices connected, and this happens even in normal system usage.


Does anyone know:


  • What exactly RTCReporting and the rtcreportingd process are doing?
  • Why this file grows so large and aggressively?
  • How to disable or mitigate this behavior without compromising system stability or diagnostics?


Any help would be greatly appreciated. Let me know if I can provide logs or more technical details.

MacBook Pro 13″, macOS 15.3

Posted on May 14, 2025 1:46 AM

Reply
7 replies

May 14, 2025 2:18 AM in response to gl0by

RTCReporting is a System Process that can not be deleted 


Upon further investigate,  from within Activity Monitor 


Below are the files that are open and in use  


If as you have mentioned “ Over time, this file grows uncontrollably—sometimes exceeding 60 GB—which gradually fills up my disk. “ 


This appears to be some Other Issues that  may need investigating 




/usr/libexec/rtcreportingd


/Library/Preferences/Logging/.plist-cache.a6yhlHQ0


/private/var/db/timezone/tz/2025b.1.0/icutz/icutz44l.dat


/private/var/root/Library/Caches/com.apple.rtcreporting/eventcache/cache.db-shm


/System/Library/CoreServices/SystemVersion.bundle/English.lproj/SystemVersion.strings


/private/var/db/mds/messages/se_SecurityMessages


/usr/lib/dyld


/System/Library/Frameworks/CFNetwork.framework/Versions/A/Resources/DafsaData.bin


/private/var/db/analyticsd/events.allowlist


/usr/share/icu/icudt76l.dat


/dev/null


/dev/null


/dev/null


/private/var/root/Library/Logs/RTCReporting/RTCReporting_messageLog_2025-05-14-03-23-50.txt


/private/var/root/Library/Caches/com.apple.rtcreporting/eventcache/cache.db


/private/var/root/Library/Caches/com.apple.rtcreporting/eventcache/cache.db-wal


/private/var/root/Library/Caches/com.apple.rtcreporting/eventcache/cache.db-shm


[ctl com.apple.netsrc id 8 unit 34]


To pursue this Further Investigate suggestion



To skip the Q&A session, just download the Application Etrecheck directly from the Developer. 


It’s a diagnostic tool that doesn’t change your computer at all. It gives you a clear and easy-to-read list of both your hardware and software


You can get it for free or pay for extra features. And don’t worry, the report won’t reveal any personal information. 


Once you’re done, just copy and paste the full report using the Additional Text Icon.


Lastly - should you decide to use and post the Report now or at a later time, we are willing to have a very close look and offer some insights 


May 14, 2025 2:13 AM in response to gl0by

The "RTCReporting_messageLog" file found on Apple devices, such as iPhones and iPads, is a log file related to Real-time Communication (RTC) activity, specifically audio and video calls. It collects data about calls made or received, their type (FaceTime, Messages video), duration, and quality. This file is primarily used by Apple for internal analytics and diagnostic purposes. 

Here's a more detailed explanation:

  • What is RTC?
  • RTC refers to Apple's technology for facilitating real-time audio and video communication, including FaceTime, video messages in the Messages app, and third-party apps using Apple's call protocols. 
  • What does the log file contain?
  • The RTCReporting_messageLog collects data about the RTC activity on your device, such as when a call was made or received, the type of call (e.g., FaceTime audio, Messages video), the duration of the call, and the call quality. 
  • Why is it there?
  • Apple uses this data for internal analytics to improve their services and for diagnostic purposes when troubleshooting issues with RTC functionality.Can you see it?
  • If you are a normal user, you won't be able to see the contents of this log file or interpret it directly. It's intended for Apple and authorized service centers to use for diagnosis. 
  • Where is it located?
  • The file is typically located in the /private/var/root/Logsdirectory on Apple devices. 



May 14, 2025 1:03 PM in response to gl0by

Aside from what has already been suggested


Once CleanMyMac aka " BrickMyMac " has been installed and used on the computer


There is no telling exactly what damages this software may has done


One school of thought has already been suggested - remove it as per Developers instaructions


Personally, would add one more step after the removal


Restart the computer in Recovery Mode and choose to Reinstall the Operating System


This may or may not replace elements of the  Home Folder ( User Account )  and replace any corrupted or removed elements and make things right.


The Other school of thought


Start Over from Scratch 


Heavy Handed - Yes ?


Effective - Yes 


For Apple Silicon computer >> Use Disk Utility to erase a Mac with Apple silicon


If going this route - I suggest Not using Startup Assist to migrate everything back.


This will probably Re-Introduce ( CleanMyMac ) back into the Operating System 


CleanMyMac , aka “ BrickMyMac


New macOS Malware "Cthulhu Stealer" Targets Apple Users' Data


Un-Like Microsoft Windows, which does have “ Disk Cleanup “ and “ Defrag “ as part of their Operating System 


Apple does not 


The choices are yours

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

RTCReporting file growing uncontrollably and consuming disk space and CPU

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.