topic Re: Syslog is not logging activity in Operating System - HP-UX

Syslog is not logging activity

Lisa Moore — Wed, 07 Aug 2002 12:05:10 GMT

Apparently /var/adm/syslog/syslog.log is not being reported to. What would have caused this and how do I fix it??

Re: Syslog is not logging activity

Bill McNAMARA_1 — Wed, 07 Aug 2002 12:09:09 GMT

Check your /etc/syslog.conf:

# @(#) $Revision: 74.1 $
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root
*.emerg *

Check the process:
# ps -ef | grep syslog
root 476 1 0 Aug 5 ? 0:00 /usr/sbin/syslogd -D
root 14055 12565 1 14:21:33 ttyp3 0:00 grep syslog

and restart if necessary:
# /sbin/init.d/syslogd
usage: /sbin/init.d/syslogd {start|stop}

Later,
Bill

Re: Syslog is not logging activity

harry d brown jr — Wed, 07 Aug 2002 12:15:31 GMT

Check to see if syslogd is running. get "lsof" (below is link) and check if the syslog.log file is open.

http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/lsof-4.64/

live free or die
harry

Re: Syslog is not logging activity

Jeff Schussele — Wed, 07 Aug 2002 12:17:19 GMT

Hi Lisa,

You should bounce the syslogd daemon.
Find the PID using
#ps -ef | grep syslog
then kill HUP it
#kill -HUP xxxx
where xxxx is the PID reported in the ps command.
This is not uncommon for the syslog daemon to "hang" like this.

HTH,
Jeff

Re: Syslog is not logging activity

Santosh Nair_1 — Wed, 07 Aug 2002 12:19:29 GMT

Another possibility if syslogd is running is that someone edited/emptied the syslog file while syslog had the file open. Try sending a HUP signal to the syslog process, i.e. kill -HUP $(cat /var/run/syslog.pid).

Also, you can try using logger to send something to syslog.

-Santosh

Re: Syslog is not logging activity

Lisa Moore — Wed, 07 Aug 2002 12:20:43 GMT

I tried the first suggestion, but there is no syslog process running. Please review the output and advise. THANKS!!

finance:/etc#cat syslog.conf
# @(#) $Revision: 74.1 $
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root
*.emerg *
finance:/etc#ps -ef | grep syslog
root 13577 7004 1 09:20:14 pts/tb 0:00 grep syslog
finance:/etc#/sbin/init.d/syslogd
usage: /sbin/init.d/syslogd {start|stop}
finance:/etc#ps -ef | grep syslog
root 13580 7004 1 09:20:45 pts/tb 0:00 grep syslog
finance:/etc#cd
finance:/#/sbin/init.d/syslogd
usage: /sbin/init.d/syslogd {start|stop}
finance:/#ps -ef | grep syslog
root 13583 7004 0 09:21:00 pts/tb 0:00 grep syslog
finance:/#

Re: Syslog is not logging activity

Santosh Nair_1 — Wed, 07 Aug 2002 12:28:14 GMT

To bring up syslogd, do the following:

/sbin/init.d/syslogd start

Note the start parameter at the end.

-Santosh

Re: Syslog is not logging activity

Hai Nguyen_1 — Wed, 07 Aug 2002 12:31:16 GMT

Lisa,

Your syslogd is not running. To start it, run:

# /sbin/init.d/syslogd start

Then check with:

# ps -ef | grep syslogd

You should see it up and running.

Your /etc/syslog.conf looks fine.

Hai

Re: Syslog is not logging activity

Lisa Moore — Wed, 07 Aug 2002 12:33:26 GMT

YOU GUYS ARE THE GREATEST!!!

Thank you sooooo much!

finance:/sbin/init.d#/sbin/init.d/syslogd start
System message logger started
finance:/sbin/init.d#ps -ef | grep syslog
root 14214 1 0 09:33:26 ? 0:00 /usr/sbin/syslogd -D
root 14216 7004 0 09:33:31 pts/tb 0:00 grep syslog
finance:/sbin/init.d#more /var/adm/syslog/syslog.log
Aug 7 09:33:26 finance syslogd: restart