In HP-UX 10.20 activities are not getting logged.

[senthil_kumar_2]

Hi,

In my HPUX 10.20 nothing is getting logged to log files.

For Example.

root@lgprime:/var/adm/syslog > ll
total 159642
-rw-rw-rw- 1 root sys 0 May 27 2008 Jim
-rw-r--r-- 1 root root 0 Oct 10 09:04 OLDsyslog.log
-r--r--r-- 1 root sys 0 Sep 18 2001 auth.log
-r--r--r-- 1 root sys 0 Sep 18 2001 lpr.log
-r--r--r-- 1 root sys 0 Sep 18 2001 security.log
-rw-r--r-- 1 root root 0 Oct 10 10:07 syslog.log
-r--r--r-- 1 root sys 0 Sep 18 2001 user.log



In above output it is showing size 0 for all above log files.


How to solve this

[Raj D. · Accepted solution]

Senthil,

-Check if syslogd daemon is runing or not:

# ps -ef | grep -i syslog


- If not running, you can restart it using:
#cd /sbin/init.d
#./syslogd start


- Then check the syslog file,for any update.


Cheers,
Raj.

[Raj D.]

Senthil,
-Once syslogd started ,verify it with ps -ef .
- Send a test message to syslog file using:
# logger Test_Message

- Check /var/adm/syslog/syslog.log file content.


Hth,
Raj.

[Duncan Edmonstone]

if the filesystem holding the syslog.log fills, then syslogd stops sending updates to it (even if the filesystem, is later cleared down)... send a HUP signal to syslogd and see if it starts writing again

HTH

Duncan

[senthil_kumar_2]

I checked if syslog is running.

root@lgprime:/var/adm/syslog > ps -ef | grep -i syslog
root 738 1 0 Oct 10 ? 1:06 /usr/sbin/syslogd -D
root 10600 11071 1 23:38:45 pts/1 0:00 grep -i syslog


I think it is running.


How to send HUP signal?

Is HUP signal used to restart the syslog service?

[James R. Ferguson]

Hi :

> How to send HUP signal?

You use 'kill' to send signals. In this case:

# kill -HUP 768

...since 768 is the process ID of 'syslogd'.

> Is HUP signal used to restart the syslog service?

Yes, a SIGHUP signal is commonly used to tell a daemon to re-read its configuration file and/or restart.

Regards!

...JRF...

[Duncan Edmonstone]

the kill command sends a signal to a process, so:

kill -HUP 738

will send a HUP signal to syslogd (which is process 738 from your output). The HUP signall causes syslogd to re-read its config file and restart...

HTH

Duncan

[Raj D.]

To send a HUP signal :

# kill -1 738



# Where 738 is the of syslogd process.

Hth,
Raj.

[senthil_kumar_2]

I have ran following commands.

# kill -1 738

# logger Test_Message


But now also there is no logs in /var/adm/syslog/syslog.log

[Raj D.]

Senthil,
It looks like something is not right with syslogd and you have to send SIGKILL(9) signal to syslogd , any way it is not updating anything at this moment,

Try:
###Verify the syslogd pid.

# kill -9 738 #where 738 is tehe syslogd pid.
# ps -ef | grep -i syslogd

# cd /sbin/init.d/ ; ./syslogd start

# ps -ef | grep syslogd

# logger Test_Message1
# cat /var/adm/syslog/syslog.log


Hth,
Raj.