topic Re: Syslog not getting updated in Operating System - HP-UX

Syslog not getting updated

Kripa_1 — Wed, 24 Mar 2010 14:34:16 GMT

Hi Gurus,

Syslog is not getting updated on my server.

bash-4.0# uname -a
HP-UX aph067a0 B.11.23 U ia64 2204346225 unlimited-user license
bash-4.0#

bash-4.0# ls -l syslog.log
-rw-r--r-- 1 root sys 0 Mar 3 14:05 syslog.log

bash-4.0# cat /etc/syslog.conf
# @(#)B.11.31_LR
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root
*.emerg

Please help.

Thanks
Ajith

Re: Syslog not getting updated

Patrick Wallek — Wed, 24 Mar 2010 14:39:04 GMT

Is the syslogd daemon running? 'ps -ef |grep syslog'

Try stopping / starting syslog.

# /sbin/init.d/syslogd stop

# /sbin/init.d/syslogd start

Re: Syslog not getting updated

Kripa_1 — Wed, 24 Mar 2010 14:44:24 GMT

I have tried restarting the syslogd but still the size is showing 0.

Can you please guide me how to test whether syslogd is working fine or not.

Whether logger command can be used for testing?

Re: Syslog not getting updated

Matti_Kurkela — Wed, 24 Mar 2010 14:56:58 GMT

Yes, "logger" is the correct command for testing syslogd.

For example, this command will create a message using priority "info", so it should be recorded to syslog.log file:

logger -t logtest -p local3.info "Kripa is testing syslogd"

But first, see if the /var filesystem is full.

When a filesystem is full, it may be possible to create new 0-sized files, but not write anything into them. This is because the filesystem metadata structures may still have free slots for files, although there are no more free blocks for storing data.

You might also want to run "dmesg" to view the kernel message buffer: if the device that holds the /var filesystem produces SCSI errors, there might be a hardware problem preventing the system from writing to the log file.

MK

Re: Syslog not getting updated

James R. Ferguson — Wed, 24 Mar 2010 15:07:18 GMT

Hi:

While I don't necessarily think that this is your problem, remember that selector/action pairs in '/etc/syslog.conf' use *tabs* as separator characters. A post of:

# cat -etv /etc/syslog.conf' would be more revealing than a simple 'cat'.

Regards!

...JRF...

Re: Syslog not getting updated

Kripa_1 — Wed, 24 Mar 2010 15:21:14 GMT

Dude you are correct.

THe issue is with spaces on the /etc/syslog.conf file.

I have corrected it and now it is working fine