- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: Log management in HP-UX
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-11-2010 05:37 AM
тАО03-11-2010 05:37 AM
Re: Log management in HP-UX
# man syslogd
The syslogd command reads and logs messages into a set of files described by the configuration file /etc/syslog.conf.
Normally we have not configured any entries to log the activities of cron , sulog , wtmp and automount.log in /etc/syslog.conf.
1)so that, will it prevent from logging the activities of cron , sulog , wtmp and automount.log in to their respective log files?
2)If yes, why the files are not created like OLDcron.log, OLDautomout.log while restarting syslog?
3)If no, will no logs be created (syslog, cron , sulog, wtmp and etc.,) if we have stopped syslog?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-11-2010 05:51 AM
тАО03-11-2010 05:51 AM
Re: Log management in HP-UX
becoz when you restart the "sylogd" as below, it will only created for OLDSyslog.log also syslogd -> dameons which writes its own information to "syslog.log" file, it should not write to OLDcron,OLDautomout.log
/sbin/init.d/syslogd stop
/sbin/init.d/syslogd start
Hope you can test above in any of your test servers. to clear doubts :)
Also you can refer to your posting
>>>I have found following entries in /etc/syslog.conf file.
#############################################
mail.debug /var/adm/syslog/mail_log
*.info;mail.none /var/adm/syslog/syslog.log
look at the syslog.conf file -> pointing to /var/adm/syslog/syslog.log
mail -> pointing to /var/adm/syslog/mail.log
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-11-2010 07:01 AM
тАО03-11-2010 07:01 AM
Re: Log management in HP-UX
I have tested in my test server.
I would like to know whether the logs for cron , sulog, wtmp, automount.log will be created while syslogd is down.
So firs I have down the syslogd.
# /sbin/init.d/syslogd stop
syslogd stopped
After that no logs are created with in /var/adm/syslog/syslog.log but at the same time logs are being created in /var/adm/cron/log , /var/adm/sulog and /var/adm/wtmp.
So I come to conclusion that if we have stop the syslogd then it will not create any logs to the files available under /var/adm/syslog (all the files configured in /etc/syslog.conf) but at the same time other logs (cron, sulog, wtmp) will be created. am i correct because i want to double check with you?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-11-2010 07:28 AM
тАО03-11-2010 07:28 AM
Re: Log management in HP-UX
No logs configured in syslog.conf will write when the syslogd daemon is down.
The data may be queued, you will have to test that.
But syslogd daemon is something you want up and running all the time.
SEP
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-11-2010 07:33 AM
тАО03-11-2010 07:33 AM
Re: Log management in HP-UX
All the activities of starting and stopping the services (like nfs.server and nfs.client) will be in to which file because just for testing i have stopped and started again nfs.server and nfs.client but no logs are created for this activity in /var/adm/syslog/syslog.log?
Could you please clarify me about what are the service will be logged while start and stop and which file?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-11-2010 07:58 AM
тАО03-11-2010 07:58 AM
Re: Log management in HP-UX
All the activities of starting and stopping the services (like nfs.server and nfs.client) will be in to which file because just for testing i have stopped and started again nfs.server and nfs.client but no logs are created for this activity in /var/adm/syslog/syslog.log?
>>>
All services configured to be logged in syslog will be logged with start and stop messages. But it depends how the service is configured where and how they log. apache is not going to log in syslog at all. It has its own log.
This varies application to application.
>>>>
Could you please clarify me about what are the service will be logged while start and stop and which file?
How the service will be logged depends on two factors:
1) syslog.conf configuration.
2) How the service is written. NFS does log to syslog.
SEP
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-11-2010 11:00 AM
тАО03-11-2010 11:00 AM
Re: Log management in HP-UX
1)wtmp or wtmps
2)btmp or btmps
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-11-2010 11:01 AM
тАО03-11-2010 11:01 AM
Re: Log management in HP-UX
1)wtmp or wtmps
2)btmp or btmps
Since my HP-UX server is having both wtmp & wtmps and btmp & btmps.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-11-2010 11:06 AM
тАО03-11-2010 11:06 AM
Re: Log management in HP-UX
> which one is correct? 1)wtmp or wtmps 2)btmp or btmps
If you have the "*s" named file on your server you're running 11.23 or later and that's the file that you want to analyze.
Regards!
...JRF...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-11-2010 11:09 AM
тАО03-11-2010 11:09 AM
Re: Log management in HP-UX
Just checked an 11.31 system.
They have both files but one one is active.
root@mngp01:/var/adm # ll wtmp*
-rw-rw-r-- 1 adm adm 11400 Feb 3 16:23 wtmp
-rw-rw-r-- 1 adm adm 144744 Mar 11 13:06 wtmps
-rw-r--r-- 1 root sys 280 Jan 8 16:50 wtmpx
root@mngp01:/var/adm # ll btmp*
-rw------- 1 root other 0 Mar 8 2009 btmp
-rw------- 1 root other 11084 Feb 25 17:04 btmps
The btmp on this file is zero bytes because almost nobody logs into it.
See the dates for which file is active.
Your mileage may vary on earlier releases of HP-UX.
SEP
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com