HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

In HP-UX 10.20 activities are not getting logged.

 
SOLVED
Go to solution
senthil_kumar_2
Regular Advisor

In HP-UX 10.20 activities are not getting logged.

Hi,

In my HPUX 10.20 nothing is getting logged to log files.

For Example.

root@lgprime:/var/adm/syslog > ll
total 159642
-rw-rw-rw- 1 root sys 0 May 27 2008 Jim
-rw-r--r-- 1 root root 0 Oct 10 09:04 OLDsyslog.log
-r--r--r-- 1 root sys 0 Sep 18 2001 auth.log
-r--r--r-- 1 root sys 0 Sep 18 2001 lpr.log
-r--r--r-- 1 root sys 0 Sep 18 2001 security.log
-rw-r--r-- 1 root root 0 Oct 10 10:07 syslog.log
-r--r--r-- 1 root sys 0 Sep 18 2001 user.log



In above output it is showing size 0 for all above log files.


How to solve this
16 REPLIES
Raj D.
Honored Contributor
Solution

Re: In HP-UX 10.20 activities are not getting logged.

Senthil,

-Check if syslogd daemon is runing or not:

# ps -ef | grep -i syslog


- If not running, you can restart it using:
#cd /sbin/init.d
#./syslogd start


- Then check the syslog file,for any update.


Cheers,
Raj.
" If u think u can , If u think u cannot , - You are always Right . "
Raj D.
Honored Contributor

Re: In HP-UX 10.20 activities are not getting logged.

Senthil,
-Once syslogd started ,verify it with ps -ef .
- Send a test message to syslog file using:
# logger Test_Message

- Check /var/adm/syslog/syslog.log file content.


Hth,
Raj.
" If u think u can , If u think u cannot , - You are always Right . "

Re: In HP-UX 10.20 activities are not getting logged.

if the filesystem holding the syslog.log fills, then syslogd stops sending updates to it (even if the filesystem, is later cleared down)... send a HUP signal to syslogd and see if it starts writing again

HTH

Duncan

HTH

Duncan
senthil_kumar_2
Regular Advisor

Re: In HP-UX 10.20 activities are not getting logged.

I checked if syslog is running.

root@lgprime:/var/adm/syslog > ps -ef | grep -i syslog
root 738 1 0 Oct 10 ? 1:06 /usr/sbin/syslogd -D
root 10600 11071 1 23:38:45 pts/1 0:00 grep -i syslog


I think it is running.


How to send HUP signal?

Is HUP signal used to restart the syslog service?
James R. Ferguson
Acclaimed Contributor

Re: In HP-UX 10.20 activities are not getting logged.

Hi :

> How to send HUP signal?

You use 'kill' to send signals. In this case:

# kill -HUP 768

...since 768 is the process ID of 'syslogd'.

> Is HUP signal used to restart the syslog service?

Yes, a SIGHUP signal is commonly used to tell a daemon to re-read its configuration file and/or restart.

Regards!

...JRF...

Re: In HP-UX 10.20 activities are not getting logged.

the kill command sends a signal to a process, so:

kill -HUP 738

will send a HUP signal to syslogd (which is process 738 from your output). The HUP signall causes syslogd to re-read its config file and restart...

HTH

Duncan

HTH

Duncan
Raj D.
Honored Contributor

Re: In HP-UX 10.20 activities are not getting logged.

To send a HUP signal :

# kill -1 738



# Where 738 is the of syslogd process.

Hth,
Raj.

" If u think u can , If u think u cannot , - You are always Right . "
senthil_kumar_2
Regular Advisor

Re: In HP-UX 10.20 activities are not getting logged.

I have ran following commands.

# kill -1 738

# logger Test_Message


But now also there is no logs in /var/adm/syslog/syslog.log


Raj D.
Honored Contributor

Re: In HP-UX 10.20 activities are not getting logged.

Senthil,
It looks like something is not right with syslogd and you have to send SIGKILL(9) signal to syslogd , any way it is not updating anything at this moment,

Try:
###Verify the syslogd pid.

# kill -9 738 #where 738 is tehe syslogd pid.
# ps -ef | grep -i syslogd

# cd /sbin/init.d/ ; ./syslogd start

# ps -ef | grep syslogd

# logger Test_Message1
# cat /var/adm/syslog/syslog.log


Hth,
Raj.
" If u think u can , If u think u cannot , - You are always Right . "
James R. Ferguson
Acclaimed Contributor

Re: In HP-UX 10.20 activities are not getting logged.

Hi (again):

Did you modify the '/etc/syslog.conf' file?

If so, make sure that TAB characters and not spaces separate the fields. You can use 'cat -etv /etc/syslog.conf' to confirm.

If this is the case, fix the file and restart the 'syslog' daemon:

# /sbin/init.d/syslogd stop
# /sbin/init.d/syslogd start

Regards!

...JRF...
Regards!

...JRF...

Re: In HP-UX 10.20 activities are not getting logged.

are you sure the /var filesystem isn't full?

maybe syslogd is configured to post somewhere else - can you post the contents of the /etc/syslog.conf file?

HTH

Duncan

HTH

Duncan
Matti_Kurkela
Honored Contributor

Re: In HP-UX 10.20 activities are not getting logged.

The standard syslog daemon will not automatically create any log files if they don't exist.

Use these commands to create the log files:
cd /var/adm/syslog
touch auth.log lpr.log security.log syslog.log user.log

Then send a HUP signal to syslog daemon again.

Hmm... at least in 11.00 and newer, auth.log, lpr.log, security.log and user.log are not standard in HP-UX. Check the /etc/syslog.conf file: you may have a customized syslog configuration.

A factory default version of /etc/syslog.conf should be at /usr/newconfig/etc/syslog.conf; compare them.

MK
MK
F Verschuren
Esteemed Contributor

Re: In HP-UX 10.20 activities are not getting logged.

looks like a error in the /etc/syslog.conf
Please check this file especialy for spaces, you neet to remove all spaches and replease them whit tabs.
please post the /etc/syslog.conf for futher investegation if the spaces where not the solution
Suraj K Sankari
Honored Contributor

Re: In HP-UX 10.20 activities are not getting logged.

HI,

If its a dev or test box then try to reboot and check again.

Suraj
R.K. #
Honored Contributor

Re: In HP-UX 10.20 activities are not getting logged.

Hi Senthil,

If syslogd is running and you have already restarted it, still nothing logged in syslog, then MOVE present syslog.conf and COPY SYSLOG.CONF from another (similar) system, restart syslogd and see if it works.
Don't fix what ain't broke
senthil_kumar_2
Regular Advisor

Re: In HP-UX 10.20 activities are not getting logged.

Now it is getting logged fine.

the issue is they have mentioned some another file other than syslog.log in /etc/syslog.conf.

so it is getting logged to that file.