HP-UX log files

[N A Khan]

Hi Friends,

We have a hp9000 rp5470 and a rp2400 server with standard HP-UX 11i. We would like to (a) monitor & (b) troubleshoot the system (hw and OS). How can we do this with standard OS ?
Like - we know about syslog. What are the other interesting files ? What are other means ? Plus how can we send email to administrator about warning and errors ?

best regards
N A Khan

[Rajeev Shukla]

Other files of intrest would be
/etc/rc.log (whcih tells about the errors in startup scripts)
/var/adm/sulog (which shows people doing su)
type dmesg (that tells about startup things and any errors loged in system)
a good practice is mail dmesg to yourself using sendmail on the system
in /etc/mail/aliases put your name and white a house keeping script to send these files to yourself every day.
See /var/adm/mail.log for logs in mail
/etc/shutdownlog
/var/adm/wtmp & /var/adm/utmp which can be accessed by last and lastb command. See the man pages for more detail.

To get alert on any hardware failures best is to install ems and configure alerts to be sent by mail and in /etc/mail/aliases aliase root to yourself so any mails sent to root comes to you. You can get all Disk, memory etc.. hardware related messages by "ems"
Rajeev

[T G Manikandan]

/var/adm/syslog/syslog
system log.
/var/adm/syslog/mail.log
mail log
/var/adm/cron/cron.log
cron job log
/var/adm/sw/*.log
SD logs(software distribution)
/var/adm/lp/log
printer logs
/var/adm/utmp , wtmp , btmp
login attempts,bad login attemprs log
/var/adm/sulog
switch user(su) log
/var/adm/shutdownlog
system shutdown and reboot log
/var/sam/log/samlog
SAM application log
/etc/rc.log
startup and shutdown scripts log

[eran maor]

Hi

i will not common about the log files because you got all the answer about them ,
just wanted to add that you can also monitor your hardware in your system if you will install the EMS software ( you can find it on the support plus cd ) .

this will give you an option to monitor on your hardware in the system and to get elert or mail if you have any hardware problem .

[Ajit Natarajan]

If you're interested in finding out about networking related problems, you could also look at the NetTL (network tracing/logging) logs. They are located in /var/adm/nettl*. Start with the file most recently updated and work your way backward.

Note that the files themselves are in binary format. Use the netfmt command to format them.

Quick tips:

netfmt -f /var/adm/nettl.LOG000

will format the entire logfile nettl.LOG000.

netfmt -t 20 -f /var/adm/nettl.LOG000

will get you the most recent 20 records from nettl.LOG000.

NetTL records messages from drivers and the transport stack. Usually, error and disaster class messages are logged. However, the system admin. can also enable warning as well as informational class messages.

You may want to look at the nettl man page for more details.

Thanks.

Ajit
HP Gigabit Ethernet

[Steven E. Protter]

I'm going to attach a few sysadmin scripts that you should run.

I've tarred up some scripts.

One checks hardware and can be used in cron to email alerts on failures, usually before the component fails.

Another checks for ane reports failed root logins, disk space, fun stuff like that.

P

[Sean OB_1]

Also if you have support, and even if you don't, I would install ISEE (Instant Support) which will monitor the hardware for errors.