From: T. Horsnell (tsh@mrc-lmb.cam.ac.uk)
Date: Wed Feb 22 2006 - 11:19:51 EST
>Hi all,
>Logging into syslog.dated seems to have stopped on
>my 5.1B system on Feb 17th at around 11.27am:
>
># ls -l /var/adm/syslog.dated/
>total 2
>drwxr-xr-x 2 root adm 512 Feb 15 11:26 15-Feb-11:26
>drwxr-xr-x 2 root adm 512 Feb 16 11:27 16-Feb-11:27
>lrwxr-xr-x 1 root adm 12 Feb 16 11:27 current -> 16-Feb-11:27
>
># ls -l /var/adm/syslog.dated/current/
>total 10040
>-rw-r----- 1 root adm 60627 Feb 17 11:24 auth.log
>-rw-r----- 1 root adm 317782 Feb 17 11:27 daemon.log
>-rw-r----- 1 root adm 10598 Feb 17 11:15 kern.log
>-rw-r----- 1 root adm 745 Feb 16 18:20 lpr.log
>-rw-r----- 1 root adm 9855365 Feb 17 11:27 mail.log
>-rw-r----- 1 root adm 7697 Feb 17 11:27 syslog.log
>-rw-r----- 1 root adm 0 Feb 16 11:27 user.log
>
>syslogd is running:
># ps -ef | grep syslogd
>root 581 1 0.0 Jan 14 ?? 14:54.54 /usr/sbin/syslogd -e
>
>plenty of disk space:
># df -k /var
>Filesystem 1024-blocks Used Available Capacity Mounted on
>/dev/disk/dsk0d 1969183 940584 831680 54% /var
>
>
>What could cause this?
>What is it that causes the logs to rotate anyway? I cant see
>anything in root's crontab to do this.
>Is it time for a reboot?
Well, I stopped and restarted syslogd (/sbin/init.d/syslogd stop/start)
and loging resumed as normal. I dont know why it stopped in the first place...
>
>Also, when I look at /etc/syslogd.conf, it seems to be set up
>to log into the wrong place - shouldnt stuff be going into
>/var/adm/syslog.dated/current/... and not /var/adm/syslog.dated/...
Damn. I should have read a bit more of syslogd man pages.
Sorry if I've wasted anyone's time here.
T.
>
>
>Cheers,
>Terry.
>
>
># syslogd config file
>#
># facilities: kern user mail daemon auth syslog lpr binary
># priorities: emerg alert crit err warning notice info debug
>kern.debug /var/adm/syslog.dated/kern.log
>user.debug /var/adm/syslog.dated/user.log
>mail.debug /var/adm/syslog.dated/mail.log
>daemon.debug /var/adm/syslog.dated/daemon.log
>auth.debug /var/adm/syslog.dated/auth.log
>syslog.debug /var/adm/syslog.dated/syslog.log
>lpr.info /var/adm/syslog.dated/lpr.log
>
>msgbuf.err /var/adm/crash/msgbuf.savecore
>
>kern.debug /var/adm/messages
>kern.debug /dev/console
>*.emerg *
># %LGT611_BEGIN% - DO NOT MODIFY OR DELETE (Wed Sep 3 13:20:50 2003)
># The following lets NetWorker use the syslog facility
>daemon.notice /dev/console
>daemon.notice /nsr/logs/messages
>daemon.notice operator
>local0.notice /nsr/logs/summary
>local0.alert root, operator
># %LGT611_END% - DO NOT MODIFY OR DELETE
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:50:28 EDT