sulog entries

[dhanish]

I have a question if i reboot my system then sulog ,wtmp,btmp entries will remain there or they will be flused.

[James R. Ferguson]

Hi:

Unless you trim logs like these, they will grow endlessly. To empty them, do this:

# cat /dev/null > /var/adm/wtmp

etc. or if you prefer shorthand:

# > /var/adm/wtmp

...JRF...

[Rob Smith]

Hi, or you can write a little script to empty those log files when they reach a certain size.

#!/usr/bin/sh

VAL=`/usr/bin/ll /var/adm/wtmp | awk '{print $5}'`

if [[ $VAL -gt 1000000 ]]
then

cat /dev/null > /var/adm/wtmp

fi


exit

Hope this helps.

Rob

[Jim Turner]

Before you zero-out the files, you might consider archiving them somewhere. You may encounter a situation where you need to investigate login's or su's.

Cheers,
Jim

[Bruce Regittko_1]

Hi,

No those and most other log files are not flushed at reboot - they should still be there - unless someone wrote (or modified) a startup/shutdown script.

--Bruce

[dhanish]

Thanks to all of you.

[Paula J Frazer-Campbell]

Hi

SAM has a log trimming facility:-

Sam
Routine tasks
System log files


Paula

[Shahul]

Hi Nitin

Once U reboot ur sulog will be flushed off. But wtmp and btmp will remain same.


Shahul