topic Re: can i delete the logs in Operating System - HP-UX

can i delete the logs

bunty..... — Mon, 16 Jan 2006 10:58:40 GMT

hi friends,
can i delete the some log entries from /var/adm/syslog/syslog.log file.

if yes, then how can i?

thanks
bunty

Re: can i delete the logs

Peter Godron — Mon, 16 Jan 2006 11:02:38 GMT

bunty,
syslog.log is used by some reporting tools, but old entries can be deleted.
You could use sam or tail records manually.
Example:
tail -1000 syslog.log > x.x
cp x.x syslog.log

Re: can i delete the logs

MarkSyder — Mon, 16 Jan 2006 11:03:33 GMT

I trim the syslog every day by going into SAM, routine tasks. Trim the syslog.log to its recommended size. This nulls the syslog.log having copied it to a file called syslog.SAMTRM, retaining only the most recent entries.

But in your case, I would leave the syslog.log alone until your disc is working - you might need to refer to it. Talking of which, you haven't told us how you're getting on with that disc in a while.

Mark Syder (like the drink but spelt different)

Re: can i delete the logs

Pete Randall — Mon, 16 Jan 2006 11:05:11 GMT

Use SAM > Routine Tasks > System Log Files or you can reboot the system. During the reboot, the syslog file is copied to OLDsyslog and a new one is started.

Pete

Re: can i delete the logs

Raj D. — Mon, 16 Jan 2006 12:29:26 GMT

Bunty ,

You should not delete the file , but you can nulligy the log files to recover space.

# > /var/adm/syslog/syslog.log
# > /var/adm/syslog/mail.log

Enjoy ,
Cheers,

Raj.

Re: can i delete the logs

Geoff Wild — Mon, 16 Jan 2006 14:52:03 GMT

Here's what I do to clean up ftp for example (I'm not using default ftp - so no one chirp in about ftp -l in inetd.conf).

# cat get-rid-of-ftp-syslog
#!/bin/sh

# script to zero out the syslog and make a bacup of it without ftp logs
# gwild
DIR=/var/adm/syslog

cp -p $DIR/syslog.log $DIR/syslog.log.bak
> $DIR/syslog.log

sed -n '/ftp/!p' $DIR/syslog.log.bak > $DIR/syslog.log.noftp.`date +%b%d%H%M`

Also, logrotate may help you as well:

http://hpux.ee.ualberta.ca/hppd/hpux/Sysadmin/logrotate-2.5/

Rgds...Geoff

Re: can i delete the logs

Geoff Wild — Mon, 16 Jan 2006 16:46:28 GMT

BTW - the logrotate even works on HP-UX Itanium.

I configured like so:

# cat /etc/logrotate.conf
# see "man logrotate" for details
# rotate log files weekly
weekly

# keep 4 weeks worth of backlogs
rotate 5

# create new (empty) log files after rotating old ones
create

# uncomment this if you want your log files compressed
#compress

# packages drop log rotation information into this directory
include /etc/logrotate.d

# no packages own wtmp -- we'll rotate them here
/var/adm/wtmp {
monthly
create 0664 adm adm
rotate 1
}

# system-specific logs may be also be configured here.

# ll /etc/logrotate.d
total 48
-rw-r--r-- 1 root sys 65 May 19 2004 maillog
-rw-r--r-- 1 root sys 65 Mar 14 2005 named.log
-rw-r--r-- 1 root sys 161 Aug 19 2004 syslog

# cat /etc/logrotate.d/maillog
/var/adm/syslog/mail.log {
rotate 5
weekly
}

# cat /etc/logrotate.d/named.log
/var/adm/named/named.log {
rotate 5
weekly
}

# cat /etc/logrotate.d/syslog
/var/adm/syslog/syslog.log {
rotate 5
weekly
postrotate
/usr/bin/kill -HUP `ps -ef |grep syslogd |awk '{print $2}'` || true
endscript
}

And in cron:

# logrotate
0 0 * * * /opt/logrotate/bin/logrotate /etc/logrotate.conf >/tmp/logrotate.cron 2>&1

Rgds...Geoff

Re: can i delete the logs

rodh_z — Mon, 16 Jan 2006 20:42:50 GMT

yes, u can.
1. touch /var/adm/syslog/syslog.log
2. chmod 644 /var/adm/syslog/syslog.log
3. /usr/sbin/syslogd -D

Re: can i delete the logs

Nguyen Anh Tien — Tue, 17 Jan 2006 01:46:51 GMT

Hi Bunty.
==
You can backup it by tar command
#tar cvf /path/newfile /var/adm/syslog/syslog.log
Trim file:
#>/var/adm/syslog/syslog.log
But I highly recommend you use logrotate
http://hpux.connect.org.uk/hppd/hpux/Sysadmin/logrotate-2.5/
to rotate your log.
========================
your question is the same as:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=991878
pls find other and my answer !
HTH
tienna

Re: can i delete the logs

Joel Girot — Tue, 17 Jan 2006 03:08:48 GMT

Hi Bunty,
Here a good ksh script found on this forum some time ago. It rotate log files based on size, lifespan, It allow compression, manage the "old" files log generated by the system (eg OLDsyslog.log vs syslog.log), the number of copies to maintain, the security parameters to be applied to the files with chmod and chown. You can easily add or remove the log files which you wish to manage. This script already contains the majority of the basic hpux 11.11 log files. It is simple, easy to adapt and deserves to be examined.
Regards, Joel