No entries in OLDsyslog.log

[sacthivel.C]

Dear all,
We have one D270 server with hpunix 10.20.Whenever I restart the server for UPS maintenance the syslog.log becomes zero and the OLDsyslog.log contains only the entries from the time i restarted the server.It is not possible for me to get the previous logs.

Would somebody help me in this issue?

THis is my syslog.conf file entries :

//
# cat /etc/syslog.conf
# @(#) $Revision: 74.1 $
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root
*.emerg *
//

Regards,
C.Sacthivel

[piyush mathiya]

Hi,
Some possibilities...
- May be in between through some shutdown script, syslogd daemon got restarted. while restarting syslogd daemon, it will cleanup ond entries and start making entry in 0 byte file.
- Are you sure that your daemon was in running status?
- If yes, may be it was not running correctly.

Now if you dont have backup, you can get your old logs.

Regards,
Piyush Mathiya

[Roopesh Francis_1]

Sacthivel,
Check the /var file systems space.
Check wthether the syslog getting updated properly.
Take the backup of current syslog and restart the syslogd daemon and check the result.

[sacthivel.C]

Hai Every body,

I think that today is the worst day for me.
The server which I mentioned here get hanged some 3 hours before.I can ping to that server but it won't accept any telnet,rlogin or even the console login.
I checked the previous queries in itrc.(http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=758959) and checked the npty.It's value is already set to 200. Currently I have only 60 users.
This is my BDF output :

//
# bdf
Filesystem kbytes used avail %used Mounted on
/dev/vg00/lvol3 83733 35621 39738 47% /
/dev/vg00/lvol1 47829 18516 24530 43% /stand
/dev/vg00/lvol9 461077 308209 106760 74% /var
/dev/vg00/lvol8 482645 240648 193732 55% /usr
/dev/vg00/lvol7 30597 21044 6493 76% /tmp
/dev/vg00/lvol6 1001976 488367 413411 54% /software
/dev/vg00/lvol5 624667 296046 266154 53% /opt
/dev/vg00/lvol4 19861 7104 10770 40% /home
/dev/vg03/lvol2 17915904 13096401 4518504 74% /dsk8
/dev/vg03/lvol1 17920000 11863780 5677734 68% /dsk7
/dev/vg02/lvol4 2048000 1537616 478492 76% /dsk6
/dev/vg02/lvol3 2048000 1128018 862490 57% /dsk5
/dev/vg02/lvol2 2048000 1540241 476083 76% /dsk4
/dev/vg02/lvol1 2048000 1793626 238482 88% /dsk3
/dev/vg01/lvol2 2047673 1536833 306072 83% /dsk2
/dev/vg01/lvol1 2051553 1434449 411948 78% /dsk1
//

After i restared the server (hard boot) it works fine.
But without knowing the root cause i can't expect that this server will won't give any trouble.

Would somebody help me..Please

Thanks in Advance.

Regards,
C.Sacthivel

[Ganesan R]

Hi Sacthivel,

I think the server would be very busy at that point of time. That is the reason why, you were not able to login and suspect the server is hung.

You need to take the system dump to find out what the server was doing during that period. Other than dump you will not be able to find the root cause. If you have historical performance data you can analyse which resource has the bottleneck.

[sacthivel.C]

Hello Mr Ganesan.R,
Thanks for the reply.

Would you please tell me how to save the core dump in hp unix 10.20?
There is no file in /var/adm/crash.

when I execute savecore -vr it shows invalid dump header.
I tried in Google but i didn't find anything.

Regards,
C.Sacthivel

[Ganesan R]

Hi Sacthivel,

If you have configured dump device, then you need to give "TC" command from GSP/MP to take the system crash when you are not able to connect to the server and system seems to be freezed.

[Jitesh purohit_1]

Hi Sacthivel ,

1) The syslog is not having any data...

Are you running any rotatelog script on your system ?

check crontab -l

2) System is getting hung

Did you checked if you had any HPMC/LPMC dump under /var/adm/tombstones .

Jitesh