System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

How to find the system messages.

SOLVED
Go to solution
unixguy_1
Regular Advisor

How to find the system messages.


Hi Friends,

I want to find the System logfiles and messages.

i know the log files is stored in /var/adm/syslog/syslog.log -- tell me anyother system logfile location.

where is the system messages stored in -- tell me exact path?

pls anyone guide me?

Thanks,
Unixguy.
8 REPLIES
Pete Randall
Outstanding Contributor
Solution

Re: How to find the system messages.

> where is the system messages stored in -- tell me exact path?

You already did:

/var/adm/syslog/syslog.log

The only other place I can think of is the dmesg buffer, which is just that, a buffer stored in memory so there is no "path'.


Pete

Pete
unixguy_1
Regular Advisor

Re: How to find the system messages.

Yes i knoe that demesg.it will keep the full and full messaing.

if there is any other messaging directory.

Regards,
Unixguy.



Steven E. Protter
Exalted Contributor

Re: How to find the system messages.

Shalom Unixguy,

Check the configuration of syslog.conf

That tells you where the messages are configured to go.

Standard location for most of this stuff is /var/adm/syslog

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
f. halili
Trusted Contributor

Re: How to find the system messages.

Here are the ones I check:

1) /var/adm/syslog/syslog.log - check files for errors and failures
2) /var/mail/root - you will see errors as well getting mailed to root
3) #dmesg - run demsg as well
derekh
Autocross.US
Trusted Contributor

Re: How to find the system messages.

/etc/syslog.conf:
Check this file for any other log files managed by syslogd. There could be some custom defined logs here.

Some other log files/directories:

/var/adm/cron:
cron logs

/var/adm/sulog:
log of su activity

/var/adm/syslog/mail.log:
mail logs

These 2 are binary logs:

/var/adm/btmp:
unsuccessful login attempts (lastb command)

/var/adm/wtmp:
successful logins (last command)

Viewing these files:
Use the /usr/sbin/acct/fwtmp command:
- /usr/sbin/acct/fwtmp < /var/adm/wtmp > /tmp/file
I drive way too fast to worry about calories.
Johnson Punniyalingam
Honored Contributor

Re: How to find the system messages.

Hi UnixGuy,

>>I want to find the System logfiles and messages.

i know the log files is stored in /var/adm/syslog/syslog.log -- tell me anyother system logfile location.
<<

You all most got it , HPUX system logfiles located

/var/adm/syslog/syslog.log --> File
/var/adm/crash --> directory look system crash information
# dmesg

/var/opt/resmon/log/event.log -->

>>messages<< are you refering to like other operatings system logs like (SUN,LINUX)..?

HPUX -> don't have like that "messages".. but you call also check under
/var/mail/ directory

Thanks,
Johnson
Problems are common to all, but attitude makes the difference
Matti_Kurkela
Honored Contributor

Re: How to find the system messages.

I would define four categories of "system messages":

1.) Kernel messages.
These can be viewed directly using the "dmesg" command. These are stored in system RAM. These are forwarded to...

2.) Syslog.
This is a standard Unix log message system that receives log messages from both the kernel and the applications.

The syslog configuration file /etc/syslog.conf defines all syslog message destinations: the syslog daemon can store messages into file(s), send them to another machine's syslog daemon, display them on the system console, and/or output the messages to all active command line sessions. (The last two options should be used for very important messages only.)

All syslog messages have two parameters: "facility" and "priority level". The priority levels, in the order of decreasing importance, are: EMERGency, ALERT, CRITical, ERRor, WARNing, NOTICE, INFO and DEBUG.

In default configuration, HP-UX syslog writes to only two files: all mail-related messages go to /var/adm/syslog/mail.log, and everything else goes to /var/adm/syslog/syslog.log. The least important "debug" messages are not written to syslog.log file by default.

The two most critical priority levels, ALERT and EMERG, are sent to the system console in addition to the log files. The absolutely most critical messages (level EMERG) are displayed to every user that has an active command line session.

All this can be changed by configuring the /etc/syslog.conf file. The sysadmin can define additional log destinations and/or remove the default destinations if they are not appropriate.

Note: in most unix-style systems, you can read /etc/syslog.conf to find where the most important system logs are located.

3.) System startup and shutdown messages.
These are stored in /etc/rc.log, because /var is not always mounted. The messages in /etc/rc.log are more detailed than the OK/FAIL boot messages on the system console.

4.) Independent application and system daemon logs.
These are stored wherever the application or system daemon is configured to store them.
Run "find /var/adm -name '*log'" to find many logfiles of HP-UX and its additional components.

For example:
/var/adm/cron/log - cron job log
/var/adm/kc.log - kernel configuration log
/var/adm/sulog - su command log
/var/adm/shutdownlog - log of controlled shutdowns
/var/adm/snmpd.log - log file of the HP-UX standard SNMP daemon
/var/adm/SGsnmpsuba.log - ServiceGuard SNMP subagent log, if ServiceGuard is installed
/var/adm/icap.log - iCap log, if HP iCap product is installed
/var/adm/sw/sw*.log - log files of swinstall tools

MK
MK
unixguy_1
Regular Advisor

Re: How to find the system messages.


Dear Friends,

I closed this issue.

Regards,
Unixguy.