/dev/log syslog problem

[Dan Matlock_1]

we have a strange problem here.... syslogd doesn't seem to write to syslog.log. When I use the logger cmd, it writes to /dev/log and not syslog.log. Not sure how to fix this. Bouncing the syslogd shows the start/stop, but nothing else writes.....

[Denver Osborn]

What do the contents of your /etc/syslog.conf file look like?

cat /etc/syslog.conf

When you stop/start syslogd, nothing was written to /var/adm/syslog/syslog.log? And you also checked /var isn't a full filesystem?

-denver

[Bill Hassell · Accepted solution]

/etc/syslog.conf controls where and how syslogd writes messages. Try this to see if syslog.conf was changed:

diff /etc/syslogd.conf /usr/newconfig/etc/syslog.conf

If there is no output, then make sure your patches for syslogd are up to date. If there are differences listed in the above command, temporarily replace syslog.conf:

cp /etc/syslog.conf /etc/syslog.conf.old
cp /usr/newconfig/etc/syslog.conf /etc/syslog.conf

Now restart syslogd:

kill -HUP $(cat /var/run/syslog.pid)

(or you can use the start/stop script for syslog)

[Dan Matlock_1]

Thanks for the comments. I did check the newconfig file yesterday, and found differences. I rolled it into place. I did notice that 'someone' earlier in the day add some tivoli stuff, and quite possibly corrupted the file. Anyway it works now, thanks!