topic syslog troubleshooting in Operating System - HP-UX

syslog troubleshooting

Mahesh Alexander — Mon, 06 Jul 2009 13:18:01 GMT

Hi all,

Do somebody knows a good site or some guides to understand how syslog works and how to troubleshoot it? I am looking for the most common and critical errors found in syslog. For instance, what are the most common checks to perform every morning when you log in and want to know the status of your servers.

Thx!

Re: syslog troubleshooting

Steven E. Protter — Mon, 06 Jul 2009 13:30:26 GMT

Shalom,

I pull messages out of it, and put them into google with a few search terms identifying the OS.

I have a couple of scripts that scan the file for lbolt, which means a disk problem has happened and automatically notify important people by email, so the problem is dealt with swiftly.

SEP

Re: syslog troubleshooting

SUDHAKAR_18 — Mon, 06 Jul 2009 13:39:10 GMT

To check the server include following commands in the script. you can run this script daily to check the syslog events / errors.
--------------------------------------------
grep -i full /var/adm/syslog/syslog.log |pg

grep -i fail /var/adm/syslog/syslog.log |pg
grep -i fault /var/adm/syslog/syslog.log |pg
grep -i error /var/adm/syslog/syslog.log |pg
grep -i scsi /var/adm/syslog/syslog.log |pg
grep -i lbolt /var/adm/syslog/syslog.log |pg
grep -i ems /var/adm/syslog/syslog.log |pg
grep -i lpmc /var/adm/syslog/syslog.log |pg
grep -i critical /var/adm/syslog/syslog.log |pg
grep -i Recovered /var/adm/syslog/syslog.log |pg
grep -i Restored /var/adm/syslog/syslog.log |pg
grep -i incorr /var/adm/syslog/syslog.log |pg
grep -i su: /var/adm/syslog/syslog.log |pg
grep -i cmcld /var/adm/syslog/syslog.log
grep -i lvm /var/adm/syslog/syslog.log
#tail -30 /var/adm/sulog |pg
netstat -in |pg
netstat -nvr |pg
netstat -an |grep "ESTABLISHED" |wc -l |pg
cat /var/adm/syslog/syslog.log |grep -i "connection logging"
ll /var/opt/resmon/log
--------------------------------------------

Re: syslog troubleshooting

Mahesh Alexander — Mon, 06 Jul 2009 13:43:30 GMT

That is pretty cool! thanks! Do anybody has the script which sends and email with the result?

regards,

Re: syslog troubleshooting

Mel Burslan — Mon, 06 Jul 2009 13:47:52 GMT

Put whatever commands you like above, in a file and call it syslogchecker.sh

chmod 700 /path/to/syslogchecker.sh
run it as:

/path/to/syslogchecker.sh | mailx -s "syslog check results for $(date)" myemail@mydomain.com

this command above assumes your server has ability to send mail to the outside world. If not, check recent forum archives about questions, regarding enabling mail sending on hpux.

Hope this helps

Re: syslog troubleshooting

Mahesh Alexander — Mon, 06 Jul 2009 14:12:52 GMT

Thanks Mel, will try it out.

Re: syslog troubleshooting

Mahesh Alexander — Mon, 06 Jul 2009 14:42:52 GMT

Thanks all for your quick response. Thank you.