topic Re: Nothing going into syslog in Operating System - HP-UX

Nothing going into syslog

Yvonne Butler — Mon, 08 Jun 2009 12:59:19 GMT

Hi

We have two new rx3600 servers which have just been built by consultants but for some reason no messages are going into syslog. I've restarted syslogd but still nothing.

Any ideas?

Re: Nothing going into syslog

Richard Hepworth — Mon, 08 Jun 2009 13:05:48 GMT

Hi Yvonne,

Can you post the contents of /etc/syslog.conf?

thanks

Richard

Re: Nothing going into syslog

TTr — Mon, 08 Jun 2009 13:10:39 GMT

> I've restarted syslogd but still nothing.

How long has the syslogd been running? It is possible that nothing was generated. Force a syslog message by running "logger test".
Check if syslog is actually running and check its startup file in /etc/rc.config.d/syslog.
Check if /etc/syslog.conf is modified and they set the servers to log somewhere else or not log at all. Check if the consultants installed syslog-ng.

Re: Nothing going into syslog

Yvonne Butler — Mon, 08 Jun 2009 13:15:33 GMT

Hi

Yes sorry I should have mentioned that each time I've restarted syslogd I've run logger to put a message through but it doesn't enter into the syslog.log. As for the contents of syslog.conf, see below:

# @(#)B.11.31_LR
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
mail.debug /var/adm/syslog/mail.log
local5.info /var/adm/syslog/local5ftp.log
daemon.info /var/adm/syslog/daemon.log
auth.info /var/adm/syslog/auth.log
*.info;mail.none;local5.none;daemon.none;auth.info /var/adm/syslog/syslog.l
og
*.alert /dev/console
*.alert root
*.emerg *
user.alert @uklnet002

Re: Nothing going into syslog

James R. Ferguson — Mon, 08 Jun 2009 13:21:26 GMT

Hi Yvonne:

The '/etc/syslog.conf' file requires TAB characters as field seperators as described in the manpages for 'syslogd(1M)'.

Make sure you have TAB and not space characters. You can verify with:

# cat -et /etc/syslog.conf

Regards!

...JRF...

Re: Nothing going into syslog

TTr — Mon, 08 Jun 2009 13:24:11 GMT

The last line in the syslog.conf is an add-onn. I suspect it has spaces in it.

Re: Nothing going into syslog

Yvonne Butler — Mon, 08 Jun 2009 13:30:08 GMT

Hi

You were right, that last line did have spaces and I replaced them with a tab, restarted syslogd (by running kill -HUP on the process), then ran a logger command but still nothing in the syslog.log.

rgds

Re: Nothing going into syslog

Yvonne Butler — Mon, 08 Jun 2009 13:38:40 GMT

Fixed it!

I copied over a syslog.conf from the old server and suspect there were more spaces in the file on other lines as the old syslog.conf works fine.

Thanks everyone.