syslog not working even after restarting

[kumar.s]

Hi All ,

I am Facing a issue with syslog , which is not getting updated , even after rebooting the server .

I have tried restarting the daemon , Sending HUP signal to the PID & also tried restarting the server. Only while restarting the daemon the date & time on the syslog.log is changed . No information is logging in the syslog .

Is there any patchig to be dont on the server Help me to resolve the issue ,

# model
9000/800/A180c
#
#ll syslog.log
-rw-r--r-- 1 root root 0 Sep 15 08:38 syslog.log
# more syslog.log

#ps -ef |grep syslog
root 20359 1 0 08:38:03 ? 0:00 /usr/sbin/syslogd -D -v
#
#
# kill -s HUP 20359
#
# ll syslog.log
-rw-r--r-- 1 root root 0 Sep 15 08:38 syslog.log
# logger -t TEST "Test Message to syslog"
#
# ll syslog.log
-rw-r--r-- 1 root root 0 Sep 15 08:38 syslog.log
# more syslog.log

#
#
#
# /sbin/init.d/syslogd stop
syslogd stopped
#
#ps -ef |grep syslog
root 20635 17467 1 08:43:33 ttyp2 0:00 grep syslog
#
# /sbin/init.d/syslogd start
System message logger started
#
#ll syslog.log
-rw-r--r-- 1 root root 0 Sep 15 08:48 syslog.log

#
#uname -a
HP-UX inddns02 B.11.00 U 9000/800 2007484315 unlimited-user license

And my Syslog config file looks like this

more syslog.conf
# @(#) $Revision: 74.1 $
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root
*.emerg *

Looking for your valuable suggestions

Thanks in advance
Sathish

[Sameer_Nirmal]

Take a look at this document and document and verify various things mentioned in the
document.
http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000080027228

[MarkSyder]

The first thing I would question is disc space.

cd /var/adm/syslog
bdf -il .

Mark Syder (like the drink but spelt different)

[florin_10]

The use of a space instead of a tab in /etc/syslog.conf will stop sylogd loging anyting.

Regards,
flg

[florin_10]

The use of a space instead of a tab between facility.level and destination in /etc/syslog.conf will stop sylogd loging anything.

Regards,
flg

[KapilRaj]

I do not know what 'logger' does. But it looks like the sendmail logs are enabled . Why not send an email and check if the log is updated ?.

Regds,

Kaps

[Jan de Haas_3]

If you're not sure if the problem is with your syslog.conf file, get a fresh one from the /usr/newconfig/etc dir.

Restart syslogd and see if it works with the fresh syslog.conf.

[RAC_1]

Coulple of things to check.
1. Syslog.conf (the clumn seperator is tab and not space.)
2. Is logging enabled? inetd -l (to hardcode the changes, check /etc/rc.config.d/inetd file.
3. Does logger command works?
4. Space issues?