syslog.log not logging

[Scott_20]

I stopped/started (-D option) the process, an OLDsyslog.log was created as well as a new time stamped syslog.log, but nothing is logging. syslog.conf looks ok,

[Chris Wilshaw]

Try killing the process with a -HUP signal

eg

kill -HUP

[Pete Randall]

Scott,

The -D option will "Prevent the kernel from directly printing its
messages on the system console."



Pete

[Sridhar Bhaskarla]

Hi,

OLDsyslog.log won't get created by restarting the syslog process. You might have run /sbin/init.d/syslogd start|stop.

I would simply "kill " and then "syslogd -D" to restart syslogd daemon. You should see a message "syslogd:restart" in
your syslog.log.

-Sri

[Scot Bean]

Could be you machine has no current system messages.

Try 'logger test message' to see if it is logging.

[Pete Randall]

Scott,

Re-reading your question, I think I mis-read it the first time. You were saying that you stopped syslogd, and then restarted it with the -D option, right?


Pete

[Scott_20]

update
"logger message" isn't writing to syslog.log
when i stop and start the process or kill -HUP pid still i get nothing

kill -HUP pid - nothing
/sbin/init.d/syslogd start -D -nothing
kill pid, then start as above - nothing

I didn't some failed su's but they didn't log either.

plan b?

scott

[Bernhard Mueller]

Scott,

did you change /etc/syslog.conf?

If so, make sure there are *no blanks* in it, only TABs. To make sure copy a default conf from another machine and try to start syslog with that one.

Regards,
Bernhard

[Sridhar Bhaskarla · Accepted solution]

Hi,

1. check the syslogd executable

ll /usr/sbin/syslogd

Make sure it's not zeroe'd out.

2. Kill syslogd

#cat /var/run/syslog.pid

kill 'pid_of_syslogd'

ps -ef|grep syslogd

If it is still running, then note the PID from the above and then kill it

kill 'pid_of_syslog'

3. Copy the default syslog configuration file

#mv /etc/syslog.conf /etc/syslog.conf.old
#cp /usr/newconfig/etc/syslog.conf /etc

4. Start syslogd

/usr/sbin/syslogd -D

5. See if the file /var/adm/syslog/syslog.log is getting messages.

If the above works, then your syslog.conf might have gotten messed up.

-Sri

[Jeff Schussele]

Simple question - Is /var full?

Rgds,
Jeff

[Donny Jekels]

TABS TABS TABS TABS

make sure you dont use spaces in your syslog.conf file, instead make sure you use tabs.

this is usually the BUG in syslog. to make it stop working