How to find the system messages.

[unixguy_1]

Hi Friends,

I want to find the System logfiles and messages.

i know the log files is stored in /var/adm/syslog/syslog.log -- tell me anyother system logfile location.

where is the system messages stored in -- tell me exact path?

pls anyone guide me?

Thanks,
Unixguy.

[Pete Randall · Accepted solution]

> where is the system messages stored in -- tell me exact path?

You already did:

/var/adm/syslog/syslog.log

The only other place I can think of is the dmesg buffer, which is just that, a buffer stored in memory so there is no "path'.


Pete

[unixguy_1]

Yes i knoe that demesg.it will keep the full and full messaing.

if there is any other messaging directory.

Regards,
Unixguy.

[Steven E. Protter]

Shalom Unixguy,

Check the configuration of syslog.conf

That tells you where the messages are configured to go.

Standard location for most of this stuff is /var/adm/syslog

SEP

[f. halili]

Here are the ones I check:

1) /var/adm/syslog/syslog.log - check files for errors and failures
2) /var/mail/root - you will see errors as well getting mailed to root
3) #dmesg - run demsg as well

[Autocross.US]

/etc/syslog.conf:
Check this file for any other log files managed by syslogd. There could be some custom defined logs here.

Some other log files/directories:

/var/adm/cron:
cron logs

/var/adm/sulog:
log of su activity

/var/adm/syslog/mail.log:
mail logs

These 2 are binary logs:

/var/adm/btmp:
unsuccessful login attempts (lastb command)

/var/adm/wtmp:
successful logins (last command)

Viewing these files:
Use the /usr/sbin/acct/fwtmp command:
- /usr/sbin/acct/fwtmp < /var/adm/wtmp > /tmp/file

[Johnson Punniyalingam]

Hi UnixGuy,

>>I want to find the System logfiles and messages.

i know the log files is stored in /var/adm/syslog/syslog.log -- tell me anyother system logfile location.
<<

You all most got it , HPUX system logfiles located

/var/adm/syslog/syslog.log --> File
/var/adm/crash --> directory look system crash information
# dmesg

/var/opt/resmon/log/event.log -->

>>messages<< are you refering to like other operatings system logs like (SUN,LINUX)..?

HPUX -> don't have like that "messages".. but you call also check under
/var/mail/ directory

Thanks,
Johnson

[Matti_Kurkela]

I would define four categories of "system messages":

1.) Kernel messages.
These can be viewed directly using the "dmesg" command. These are stored in system RAM. These are forwarded to...

2.) Syslog.
This is a standard Unix log message system that receives log messages from both the kernel and the applications.

The syslog configuration file /etc/syslog.conf defines all syslog message destinations: the syslog daemon can store messages into file(s), send them to another machine's syslog daemon, display them on the system console, and/or output the messages to all active command line sessions. (The last two options should be used for very important messages only.)

All syslog messages have two parameters: "facility" and "priority level". The priority levels, in the order of decreasing importance, are: EMERGency, ALERT, CRITical, ERRor, WARNing, NOTICE, INFO and DEBUG.

In default configuration, HP-UX syslog writes to only two files: all mail-related messages go to /var/adm/syslog/mail.log, and everything else goes to /var/adm/syslog/syslog.log. The least important "debug" messages are not written to syslog.log file by default.

The two most critical priority levels, ALERT and EMERG, are sent to the system console in addition to the log files. The absolutely most critical messages (level EMERG) are displayed to every user that has an active command line session.

All this can be changed by configuring the /etc/syslog.conf file. The sysadmin can define additional log destinations and/or remove the default destinations if they are not appropriate.

Note: in most unix-style systems, you can read /etc/syslog.conf to find where the most important system logs are located.

3.) System startup and shutdown messages.
These are stored in /etc/rc.log, because /var is not always mounted. The messages in /etc/rc.log are more detailed than the OK/FAIL boot messages on the system console.

4.) Independent application and system daemon logs.
These are stored wherever the application or system daemon is configured to store them.
Run "find /var/adm -name '*log'" to find many logfiles of HP-UX and its additional components.

For example:
/var/adm/cron/log - cron job log
/var/adm/kc.log - kernel configuration log
/var/adm/sulog - su command log
/var/adm/shutdownlog - log of controlled shutdowns
/var/adm/snmpd.log - log file of the HP-UX standard SNMP daemon
/var/adm/SGsnmpsuba.log - ServiceGuard SNMP subagent log, if ServiceGuard is installed
/var/adm/icap.log - iCap log, if HP iCap product is installed
/var/adm/sw/sw*.log - log files of swinstall tools

MK

[unixguy_1]

Dear Friends,

I closed this issue.

Regards,
Unixguy.