syslog is not updated

gate2vn

Verified User
Joined
Nov 9, 2004
Messages
483
Location
Oslo
"ps -aux" I can see
oot 7767 0.0 0.0 1584 564 ? S 16:47 0:00 syslogd -m 0

however, the "messages" file is not updated. Its size is 0. Tried to restart syslog without any difference

Is there any idea?

thanks
 
- Check the permissions on the file..
- remove the file and restart syslog.
- killall -9 syslogd ( if it doesn't get killed :) and start it again
 
Do you have an entry for messages in syslog.conf?

What does it look like?

For example, mine looks like this:
Code:
# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none                /var/log/messages
Jeff
 
It seems normal

# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.* /dev/console

# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none /var/log/messages

# The authpriv file has restricted access.
authpriv.* /var/log/secure

# Log all the mail messages in one place.
mail.* /var/log/maillog


# Log cron stuff
cron.* /var/log/cron

# Everybody gets emergency messages
*.emerg *

# Save news errors of level crit and higher in a special file.
uucp,news.crit /var/log/spooler

# Save boot messages also to boot.log
local7.* /var/log/boot.log
 
I agree. The only reason I can think of that this can happen is if the file is moved while still running, and then a new file is created at the old location with touch.

And that would only work until syslogd was restarted; aftwards it would write to the proper place again.

So you might try using find to see if there's another copy of the file on the system, and/or you might try restarting syslogd.

Jeff
 
Dont see any other copy. And I noticed that not only messages, but secure, bootlog... many files zeroed. restarting syslog many times doesnt help
 
ok, found it :) I have editted the services file, and missed syslog there :D

thank all anyway ;)
 
Back
Top