HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
cancel
Showing results for 
Search instead for 
Did you mean: 

Syslog not getting updated

 
SOLVED
Go to solution
Kripa_1
Occasional Advisor

Syslog not getting updated

Hi Gurus,

Syslog is not getting updated on my server.

bash-4.0# uname -a
HP-UX aph067a0 B.11.23 U ia64 2204346225 unlimited-user license
bash-4.0#

bash-4.0# ls -l syslog.log
-rw-r--r-- 1 root sys 0 Mar 3 14:05 syslog.log

bash-4.0# cat /etc/syslog.conf
# @(#)B.11.31_LR
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root
*.emerg

Please help.

Thanks
Ajith
5 REPLIES
Patrick Wallek
Honored Contributor

Re: Syslog not getting updated

Is the syslogd daemon running? 'ps -ef |grep syslog'

Try stopping / starting syslog.

# /sbin/init.d/syslogd stop

# /sbin/init.d/syslogd start
Kripa_1
Occasional Advisor

Re: Syslog not getting updated

I have tried restarting the syslogd but still the size is showing 0.

Can you please guide me how to test whether syslogd is working fine or not.

Whether logger command can be used for testing?
Matti_Kurkela
Honored Contributor

Re: Syslog not getting updated

Yes, "logger" is the correct command for testing syslogd.

For example, this command will create a message using priority "info", so it should be recorded to syslog.log file:

logger -t logtest -p local3.info "Kripa is testing syslogd"

But first, see if the /var filesystem is full.

When a filesystem is full, it may be possible to create new 0-sized files, but not write anything into them. This is because the filesystem metadata structures may still have free slots for files, although there are no more free blocks for storing data.

You might also want to run "dmesg" to view the kernel message buffer: if the device that holds the /var filesystem produces SCSI errors, there might be a hardware problem preventing the system from writing to the log file.

MK
MK
James R. Ferguson
Acclaimed Contributor
Solution

Re: Syslog not getting updated

Hi:

While I don't necessarily think that this is your problem, remember that selector/action pairs in '/etc/syslog.conf' use *tabs* as separator characters. A post of:

# cat -etv /etc/syslog.conf' would be more revealing than a simple 'cat'.

Regards!

...JRF...
Kripa_1
Occasional Advisor

Re: Syslog not getting updated

Dude you are correct.

THe issue is with spaces on the /etc/syslog.conf file.

I have corrected it and now it is working fine