SUMMARY: syslog logs not to messages

From: Pavic, Aleksander <Aleksander.Pavic_at_telekom.de>
Date: Mon Jul 05 2004 - 06:29:07 EDT
Hello list,
the first incorrect thing was a missing loghost entry on one of the maschines
(thanks Claudia!):

snip--

Hello,

one thing you still can do: check your /etc/hosts table for the entry
"loghost". We had the same thing (with /var/log/syslog) and it took days
to recognize that someone copied the hosts-file from a machine to
another without editing the loghost-entry.
So all messages for the syslog where logged - but on a remote machine.

I don't know if that means the same for the /var/adm/messages, but it's
worth to check.
snip--

Then I take a look into the nis, because our servers have "hosts:	nis	files"
in there nsswitch.conf
One Server has the loghost flag within the nisDB.... This cause the servers to
print their log to the remote Server and not local.
Now I hope for a complete logging, longer than just a few days :)

thanks!
Aleks



>  -----Urspr|ngliche Nachricht-----
> Von: 	Pavic, Aleksander
> Gesendet:	Freitag, 2. Juli 2004 12:28
> An:	'sunmanagers@sunmanagers.org'
> Betreff:	syslog logs not to messages
>
> Hi all,
> we have an E3500 and two E420R, they have a strange Problem with syslog.
>
> syslog.conf:
> *.err;kern.notice;auth.notice;local7.none       /dev/sysmsg
> *.err;kern.debug;daemon.notice;mail.crit;local7.none    /var/adm/messages
>
> *.alert;kern.err;daemon.err;local7.none         operator
> *.alert;local7.none                             root
>
> *.emerg                                         *
>
>
> mail.debug                      ifdef(`LOGHOST', /var/log/syslog, @loghost)
>
> ifdef(`LOGHOST', ,
> user.err                                        /dev/sysmsg
> user.err                                        /var/adm/messages
> user.alert                                      `root, operator'
> user.emerg                                      *
> )
>
> You can see that only local7.none is added.
> syslogd writes permanent to /var/log/syslog but not to /var/adm/messages
>
> We miss 4-7 days of logging in /etc/var/messages.0 and messages.1...
>
> All machines run 5.8 Generic_117000-01.
>
> Any Ideas?
>
> greetz,
> Aleks
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
Received on Mon Jul 5 06:29:35 2004

This archive was generated by hypermail 2.1.8 : Thu Mar 03 2016 - 06:43:33 EST