How to check error logs?

[IFX_1]

Hi All,

What are the error logs in OpenVMS that needs to be checked? How to do it?

Thanks.

[Karl Rohwedder]

Ronald,

we have biological error sensors, which do call us in case of errors ... :-)

The usual error logs are (list not complete):

- OPERATOR.LOG
usually in SYS$MANAGER, but may relocated with OPC$LOGFILE_NAME, is plain ASCII

- SHOW ERROR
if errors a increasing, further checking can be done depending on hardware and VMS version with ANAL/ERROR[/ELV], DIAGNOSE, SEA ...

- SHOW INTRUSION
any hackers?

- ACCOUNTING
I check this only in case of unexplainable process exits (using ACCOUNTING utility)

- AUDITING
We create summary reports for brief checks (using ANAL/AUDIT)

Help for the utilities is in the system managers documentation.

regards Kalle

[Dave Laurier]

This really depends on the scope of the errors that you are looking for.

For example, the operator log is written to SYS$MANAGER:OPERATOR.LOG.

You can view the file using TYPE:

$ TYPE SYS$MANAGER:OPERATOR.LOG

or

$ TYPE/PAGE SYS$MANAGER:OPERATOR.LOG

Or you can search for certain errors using the SEARCH command:

$ SEARCH SYS$MANAGER:OPERATOR.LOG "-E-"
$ SEARCH SYS$MANAGER:OPERATOR.LOG "-F-"

The scope of the SEARCH output can be extended with the /WINDOW qualifier:

$ SEARCH SYS$MANAGER:OPERATOR.LOG "-F-" /WINDOW=(2,1)

[Phil.Howell]

also...
Batch logs - use show queue/batch/all/full
it will show the path used for log files

Depending on what network software you are running, you may need to check log files in [tcpip$*]

Other useful information can be found in clue*.lis files

A good starting point would be to install
http://h71000.www7.hp.com/openvms/journal/v7/vms_check_tool.html
you could then customise it to include additional log files as required.
Phil

[IFX_1]

Phil,
I'm running OpenVMS V7.2-1H1, can VMS_check run on this OS version? The info was quite good.

[Ian Miller.]

Ronald,
SHOW ERROR will show device errors logged since the system was booted. These errors are recorded in SYS$ERRORLOG:ERRLOG.SYS.

To look at this file you need the DECevent utility.
http://h18000.www1.hp.com/support/svctools/decevent/index.html

[IFX_1]

.

[Phil.Howell]

That happens to be the version on which it is running.
Phil