Difference between OLDsyslog.log and syslog.log

[Shivkumar]

Dear Sirs,

What is the difference between OLDsyslog.log and syslog.log in /var/adm/syslog/ directory ?

Thanks,
Shiv

[Devender Khatana · Accepted solution]

Hi Shiv,

Both of them are system logs. syslog.log is the current system log and all the system events will be reported in it since last reboot.

OLDsyslog.log is the system log for all system events prior to previous reboot.

In Fact syslog.log get moved to OLDsyslog.log during reboot.

HTH,
Devender

[Sยภเl Kย๓คг]

Hi Shiv,
When ever a system is rebooted the syslog.log file will be saved as OLDsyslog.log and the syslog.log will be flushed out. The syslog.log will be then logged with those events, after the reboot.

The OLDsyslog can be reviwed in case if the system reboots abruptly or u are forced to take a reboot after system panic. etc..

Regards,
Sunil

[Raj D.]

Hi Shiv ,

1.

/var/adm/syslog/syslog.log is the current syslog.log file.

If a system reboots , this file moved as OLDsyslog.log , and after reboot new syslog.log resides there.

2. So for for than 1 reboot , if one want the log file to be preserved , one should manually copy the OLDsyslog.log file to some other place , else it will be over written

Hope this will help.

Enjoy ,
Cheers,

Raj.

[Yong Wai Choon]

Dear sirs,
May I know which scripts that will move the syslog.log to OLDsyslog.log during reboot?
Thanks.

[Yogeeraj_1]

# grep -i OLDsyslog *
syslogd: mv /var/adm/syslog/syslog.log /var/adm/syslog/OL
Dsyslog.log
# pwd
/sbin/init.d
# cd ..
# ll rc*.d/*syslogd
lrwxr-xr-x 1 root root 20 Dec 17 2004 rc1.d/K780syslogd -> /
sbin/init.d/syslogd
lrwxr-xr-x 1 root root 20 Dec 17 2004 rc2.d/S220syslogd -> /
sbin/init.d/syslogd
#

[Muthukumar_5]

A startup script for syslog is available as,

/sbin/init.d/syslogd which will move syslog.log to OLDsyslog.log file.

-Muthu

[Sivakumar TS]

Dear Shiv,

It is ,

/sbin/init.d/syslogd

go thru the above,

With Regards,

Siva.

[Arunvijai_4]

/sbin/init.d/syslogd is responsible for starting and stopping syslog daemon.

# /sbin/init.d/syslogd
usage: /sbin/init.d/syslogd {start|stop}

-Arun

[Yong Wai Choon]

Thank you guys!

[Cem Tugrul]

Hi Shiv,

All the things about syslogd seem are said!!!
Ok..what can i do?
hmmmmm...i can give some links about syslogd
Here are they;

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=184579

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=741077

Good luck,

[Shivkumar]

How many services are controlled by syslogd daemon ?

[Raj D.]

Hi Shiv ,

Syslogd collects messages from the UNIX domain socket /dev/log.un, an
Internet domain socket specified in /etc/services, the named pipe
/dev/log, and from the kernel log device /dev/klog. By default, local
programs calling syslog() send log messages to the UNIX domain socket
(see syslog(3C)). If UNIX domain sockets are not configured on the
system, they write to the named pipe instead. If INET domain sockets
are not configured, syslogd does not receive messages forwarded from
other hosts, nor does it forward messages (see below).

Each message is one line. A message can contain a priority code and
facility code as the second field of the line.


Cheers,
Raj.

[Raj D.]

Shiv,

Here are the facilities from syslogd daemon:

-------------------------------------------
--kernel messages.
--random user-level messages.
--mail systems.
--system daemons.
--security/authorization messages.
--messages generated internally by syslogd.
--line printer subsystem messages .
--------------------------------------------

Cheers,
Raj.

[Darrel Louis]

Shiv,

It also depends on how your /etc/syslogd.conf is configured.

In there you can specify where and what you want to log.

GoodLuck

Darrel

[Raj D.]

Darrel , seems you have added one extra character :)-, It must be /etc/syslog.conf ,

Shiv , here how a syslog.conf should be look like ,

------------------------------------------
# cat /etc/syslog.conf
# @(#)B.11.11_LR
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root
*.emerg *
*.debug @gudvadm
# Tivoli logfile adapter entry, ID=
*.emerg;*.alert;*.crit;*.err;*.warning;*.notice;*.info /tmp/.tivoli/.tecad_logfile.fifo.ddsapd02.
# End of logfile adapter entry, ID=

------------------------------------------


you can configure as per your need.

hth,
Raj.