Cybersecurity

Guys,

I have a problem whereby my /var/adm/messages and /var/log/syslog are not being generated.

A few months ago this server ran out of inodes and from there it started. I was able to bring down the inode count, but the generation of the above-mentioned files still did not happen as normal.

I have checked some files like: /etc/logadm.conf
#
/var/log/syslog -C 8 -P 'Thu Aug 16 09:10:00 2007' -a 'kill -HUP `cat /var/run/syslog.pid`'
/var/adm/messages -C 4 -P 'Wed Aug 15 09:10:00 2007' -a 'kill -HUP `cat /var/run/syslog.pid`'
/var/cron/log -P 'Mon Jan 14 09:10:00 2008' -c -s 512k -t /var/cron/olog
/var/lp/logs/lpsched -C 2 -N -t '$file.$N'
#
# The entry below is used by turnacct(1M)
#
/var/adm/pacct -C 0 -N -a '/usr/lib/acct/accton pacct' -g adm -m 664 -o adm -p never



and /etc/syslog.conf

#ident "@(#)syslog.conf 1.5 98/12/14 SMI" /* SunOS 5.0 */
#
# Copyright (c) 1991-1998 by Sun Microsystems, Inc.
# All rights reserved.
#
# syslog configuration file.
#
# This file is processed by m4 so be careful to quote (`') names
# that match m4 reserved words. Also, within ifdef's, arguments
# containing commas must be quoted.
#
*.err;kern.notice;auth.notice /dev/sysmsg
*.err;kern.debug;daemon.notice;mail.crit /var/adm/messages

*.alert;kern.err;daemon.err operator
*.alert root

*.emerg *

# if a non-loghost machine chooses to have authentication messages
# sent to the loghost machine, un-comment out the following line:
#auth.notice ifdef(`LOGHOST', /var/log/authlog, @loghost)

#mail.debug ifdef(`LOGHOST', /var/log/syslog, @loghost)
mail.debug /var/log/syslog

local4.debug /var/log/ldap

#
# non-loghost machines will use the following lines to cause "user"
# log messages to be logged locally.
#
ifdef(`LOGHOST', ,
user.err /dev/sysmsg
user.err /var/adm/messages
user.alert `root, operator'
user.emerg *
)

and my cron file:

#
10 3 * * * /usr/sbin/logadm
10 3 * * 0,4 /etc/cron.d/logchecker
10 3 * * 0 /usr/lib/newsyslog
15 3 * * 0 /usr/lib/fs/nfs/nfsfind
1 2 * * * [ -x /usr/sbin/rtc ] && /usr/sbin/rtc -c > /dev/null 2>&1
30 3 * * * [ -x /usr/lib/gss/gsscred_clean ] && /usr/lib/gss/gsscred_clean
#10 3 * * * /usr/lib/krb5/kprop_script ___slave_kdcs___


Could anyone help PLEASE
I need to get my logs going!

Jair Guerra
Belize Central America

restart the syslog daemon

/etc/init.d/syslog stop
/etc/init.d/syslog start