topic Re: syslog.log not updating in Operating System - HP-UX

syslog.log not updating

Jeff Picton — Tue, 04 Nov 2003 04:20:42 GMT

Hello

One of our HPUX11 servers has not updated the syslog.log since 13th Oct 2003. Can anyone point me as to which script outputs to this log and to why it is not updating ?

Thks

Jeff

Re: syslog.log not updating

john korterman — Tue, 04 Nov 2003 04:24:46 GMT

Hi,
check if the syslog daemon is running, e.g.:
# ps -ef | grep syslog
root 842 1 0 Sep 19 ? 0:07 /usr/sbin/syslogd -D

regards,
John K.

Re: syslog.log not updating

Jeff Picton — Tue, 04 Nov 2003 04:27:47 GMT

Hi

Have done this and the syslog daemon is running :-

ps -ef | grep syslog
root 518 1 0 Oct 1 ? 0:43 /usr/sbin/syslogd -D
root 17212 7690 1 09:26:44 pts/3 0:00 grep syslog

Re: syslog.log not updating

john korterman — Tue, 04 Nov 2003 04:31:19 GMT

Hi,
the try to execute this:
# logger new entry in log

and check if it is written to the syslog.

regards,
John K.

Re: syslog.log not updating

Stefan Farrelly — Tue, 04 Nov 2003 04:32:14 GMT

Just restart syslogd; /sbin/init.d/syslogd stop/start

It happens ocassionally. Ensure you have the latest syslog patch, for 11i;

PHCO_23413 1.0 patch for syslogd(1M)

Re: syslog.log not updating

Jeff Picton — Tue, 04 Nov 2003 04:38:27 GMT

Hi

I have stopped / started syslog daemon and the logger command logged OK to syslog.

Re: syslog.log not updating

john korterman — Tue, 04 Nov 2003 04:41:16 GMT

Hi again,
then try to make an ftp connection and check if that is written to the log.

regards,
John K.

Re: syslog.log not updating

Jeff Picton — Tue, 04 Nov 2003 04:44:13 GMT

Hi John

Yes that was also logged in syslog OK

Jeff

Re: syslog.log not updating

john korterman — Tue, 04 Nov 2003 04:49:46 GMT

Hi again,
well, in that case I would think that it should now be working ok, but I suggest that you keep an eye on it.
I do not know if this is a patch problem, but Olympians are rarely wrong!

regards,
John K.

Re: syslog.log not updating

Jeff Picton — Tue, 04 Nov 2003 05:14:15 GMT

Funnily enough the file /var/adm/syslog/mail.log also stopped logging on the 13th.

Coincidence ?

Re: syslog.log not updating

john korterman — Tue, 04 Nov 2003 06:02:28 GMT

Hmmm,
I have seen forum threads reporting on failing writes to both logs. However, without finding any perfectly satifying explanation. A far out theory could be that someone has cleaned up by removing the "live" logfiles and afterwards created new files. He may then have seen that nothing was written to the files and has therefore regretted by copying back the old files into the original place. In that case there will not be written to the files until the daemon has been restarted.
But I admit it is far out...

regards,
John K.

Re: syslog.log not updating

Jeff Picton — Tue, 04 Nov 2003 06:04:28 GMT

Hi

What is the daemon called which re-starts the logging to the mail.log ?

Jeff

Re: syslog.log not updating

Pete Randall — Tue, 04 Nov 2003 06:38:29 GMT

Jeff,

Stop and restart the sendmail daemon:

/sbin/init.d/sendmail stop
/sbin/init.d/sendmail start

Pete

Re: syslog.log not updating

Elmar P. Kolkman — Tue, 04 Nov 2003 08:43:33 GMT

Nope... It is
/sbin/init.d/syslogd stop
/sbin/init.d/syslogd start

sendmail sends its logging to the syslog daemon which in turn sends it to the corresponding log files.

Re: syslog.log not updating

Elmar P. Kolkman — Tue, 04 Nov 2003 08:44:57 GMT

But I saw you already did that. In that case it seems your /etc/syslog.conf doesn't contain the lines for the mail.log file anymore.

Re: syslog.log not updating

Jeff Schussele — Tue, 04 Nov 2003 08:50:51 GMT

Hi Jeff,

I've seen the syslogd daemon hang because /var filled up & was then cleaned up.
Problem with determining this is that the log entry stating that /var filled up doesn't get written to syslog.log....BECAUSE...it filled up.
This is one of those cases where an external syslog server is good to have.

My 2 cents,
Jeff

Re: syslog.log not updating

Jeff Picton — Tue, 04 Nov 2003 08:52:51 GMT

Hi

Thanks for all the replies.

Both log files are now initialised and updating once again.

Jeff