problem with syslog

[Mark Harshman_1]

my syslog aint workin. I stopped and restarted. (/sbin/init.d/syslogd stop/start). It appears to have re-started but nothing is logging. Any ideas? this is a HPUX L2000 server, running 11i. Thanks

[John Poff]

Hi,

Have you tried the 'logger' command to see if it will write to syslog? That should test if the syslogd daemon is working. Also, what does your /etc/syslog.conf file look like?

JP

[Jeff Schussele]

What happens with the following

logger "This is a test"

Does that show up?

If that fails, then determine the syslog -D PID

ps -ef | grep syslog

& kill it. Make sure it's gone & then run

/usr/sbin/syslogd -D &

HTH,
Jeff

[Patrick Wallek]

There may not be any reason at the moment for anything to be logged to syslog.log. As said above, try the logger command to make sure that syslogd is actually working.

Another thing to check is to make sure that your /var filesystem has not filled up.

# bdf /var

And make sure it isn't at 100%. /var filling up can definitely adversely effect your syslog daemon.

[Michael Steele_2]

Check your /etc/syslog.conf file for the pathway to syslog.log. Make sure its not going over the network into another server or into another log file.

Run 'lvlnboot -v' or 'ftp' to check entries.

[Mark Harshman_1]

Thanks everyone, i had already tried killing it and restarting, and also the stop/start method. I also tried the logger as a test. The only message i get in the log file is a restart, after i restart it, none of my loggers make it. I checked the conf file also. Nothings changed. thanks

[Suresh Patoria]

Hi,

check with enable the some sevices

use the following command then check it out whether is working or not

inetd -l

Thanx

[ines coronado_2]

1. Try to log in syslog file
a. vi /tmp/syslog
b. cat /tmp/syslog
CHECKING SYSLOG
d. cat /tmp/syslog > /dev/log

If it does not log anything check permissions in syslog.log file

2.
kill -HUP `cat /var/run/syslog.pid`

[Bernhard Mueller · Accepted solution]

Hi,

did you want to change the syslog config somehow?

vi syslog.conf
:se list

you will see ^I for tabs and $ for line end

make sure there are *NO blanks* in this file.

by default it should look like:
#$
mail.debug^I^I/var/adm/syslog/mail.log$
*.info;mail.none^I/var/adm/syslog/syslog.log$
*.alert^I^I^I/dev/console$
*.alert^I^I^Iroot$
*.emerg^I^I^I*$

remove anything else, try to restart and use logger.

Regards,
Bernhard

[Bernhard Mueller]

Clarification: /etc/syslog.conf is what I meant

[Mark Harshman_1]

thanks. I took an entry out of syslog.conf as you said, and it finally worked. DOnt know why, the entry has been there for sometime. thanks to all.

[PVR]

1. Check whether /var is full or not.

2. Check whether syslogd daemon is running or not
#ps -ef | grep syslogd
If it is running kill and restart it
#kill [pid]
# syslogd start

Check /etc/syslog.conf also

Hope u haven't changed the permissions of syslog.conf file and directory