Showing results for 
Search instead for 
Did you mean: 

Syslog not getting updated

Go to solution
Occasional Advisor

Syslog not getting updated

Hi Gurus,

Syslog is not getting updated on my server.

bash-4.0# uname -a
HP-UX aph067a0 B.11.23 U ia64 2204346225 unlimited-user license

bash-4.0# ls -l syslog.log
-rw-r--r-- 1 root sys 0 Mar 3 14:05 syslog.log

bash-4.0# cat /etc/syslog.conf
# @(#)B.11.31_LR
# syslogd configuration file.
# See syslogd(1M) for information about the format of this file.
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root

Please help.

Patrick Wallek
Honored Contributor

Re: Syslog not getting updated

Is the syslogd daemon running? 'ps -ef |grep syslog'

Try stopping / starting syslog.

# /sbin/init.d/syslogd stop

# /sbin/init.d/syslogd start
Occasional Advisor

Re: Syslog not getting updated

I have tried restarting the syslogd but still the size is showing 0.

Can you please guide me how to test whether syslogd is working fine or not.

Whether logger command can be used for testing?
Honored Contributor

Re: Syslog not getting updated

Yes, "logger" is the correct command for testing syslogd.

For example, this command will create a message using priority "info", so it should be recorded to syslog.log file:

logger -t logtest -p "Kripa is testing syslogd"

But first, see if the /var filesystem is full.

When a filesystem is full, it may be possible to create new 0-sized files, but not write anything into them. This is because the filesystem metadata structures may still have free slots for files, although there are no more free blocks for storing data.

You might also want to run "dmesg" to view the kernel message buffer: if the device that holds the /var filesystem produces SCSI errors, there might be a hardware problem preventing the system from writing to the log file.

James R. Ferguson
Acclaimed Contributor

Re: Syslog not getting updated


While I don't necessarily think that this is your problem, remember that selector/action pairs in '/etc/syslog.conf' use *tabs* as separator characters. A post of:

# cat -etv /etc/syslog.conf' would be more revealing than a simple 'cat'.


Occasional Advisor

Re: Syslog not getting updated

Dude you are correct.

THe issue is with spaces on the /etc/syslog.conf file.

I have corrected it and now it is working fine