/var/adm/messages empty


 
Thread Tools Search this Thread
Operating Systems Solaris /var/adm/messages empty
# 1  
Old 04-23-2012
/var/adm/messages empty

Hi all,

One of the server is showing empty messages

Code:
# logger -p user.error HELLO_SYSLOGD
# dmesg
Mon Apr 23 15:11:19 MYT 2012

/etc/syslog.conf file, i tried copy the conf file from another server, still it is not working
Code:
*.err;kern.notice;auth.notice                   /dev/sysmsg
*.err;kern.debug;daemon.notice;mail.crit        /var/adm/messages

*.alert;kern.err;daemon.err                     operator
*.alert                                         root

*.emerg                                         *

# if a non-loghost machine chooses to have authentication messages
# sent to the loghost machine, un-comment out the following line:
#auth.notice                    ifdef(`LOGHOST', /var/log/authlog, @loghost)

mail.debug                      ifdef(`LOGHOST', /var/log/syslog, @loghost)

#
# non-loghost machines will use the following lines to cause "user"
# log messages to be logged locally.
#
ifdef(`LOGHOST', ,
user.err                                        /dev/sysmsg
user.err                                        /var/adm/messages
user.alert                                      `root, operator'
user.emerg                                      *
)

Code:
# /etc/init.d/syslog stop
# /etc/init.d/syslog start
syslog service starting.

No luck also Smilie

Code:
# mv messages messages.bak
# logger -p user.error HELLO_SYSLOGD

It generate new messages file, but not logging also.

Please help. Thanks.
# 2  
Old 04-23-2012
What is your OS version? Is it the same as the other servers?
# 3  
Old 04-23-2012
Yes, same OS version for the 2 server, Solaris 9.
# 4  
Old 04-24-2012
Is there no way to fix / enable the syslog logging? Please help. Thanks in advance.
# 5  
Old 04-25-2012
1) Check disc space. Syslog will not work with low disc space.
df -k /var/adm

2) The dmesg command does not read /var/adm/messages. It reads the console buffer.
You need to read the file direct.
more /var/adm/messages

3) mv messages messages.bak
You should never delete this file with the syslogd running and you now need to create a blank replacement file with exactly the right permissions.
Much better is:
cp -p messages messages.bak
> messages


4) Check that the new /etc/syslog.conf is identical to the other computer
and that it has not been copied by any method which would expand tab characters. The file permissions must be exactly right. The tab characters are critical in this file.
cksum /etc/syslog.conf

5) Is syslogd actually running and is there only one process?
ps -ef|grep syslogd
# 6  
Old 04-25-2012
Hi methyl,

Thanks for the reply.

Code:
# df -k /var/adm
Filesystem            kbytes    used   avail capacity  Mounted on
/dev/vx/dsk/bootdg/rootvol
                     10086988 7939555 2046564    80%    /

Code:
# more /var/adm/messages

no output Smilie
Code:
# cksum /etc/syslog.conf
147456583       1001    /etc/syslog.conf

The cksum is same with my other server.
Code:
# ps -ef|grep syslogd
    root 16249 16149  0 08:36:49 pts/2    0:00 grep syslogd
    root  6723     1  0   Apr 24 ?        0:00 /usr/sbin/syslogd

# 7  
Old 04-26-2012
If you moved the log after the previous restart, try restarting syslogd again.
Failing that you may need a reboot to clear this one.
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Solaris

Difference between /var/log/syslog and /var/adm/messages

Hi, Is the contents in /var/log/syslog and /var/adm/messages are same?? Regards (3 Replies)
Discussion started by: vks47
3 Replies

2. Shell Programming and Scripting

trying get the last /var/adm/messages

grep \"^`date "+%b %d %T"`\" /var/adm/messages | egrep \"emerg|alert|crit|err|warning\ but get an output like this ksh: alert: not found ksh: crit: not found ksh: err: not found ksh: warning": not found grep: can't open "19" grep: can't open "16:27:16"" (1 Reply)
Discussion started by: arch12
1 Replies

3. UNIX for Advanced & Expert Users

/var/adm/messages vs /var/log/messages

The /var/adm/messages in Solaris seem to log more system messages/errors compared to /var/log/messages in Linux. I checked the log level in Linux and they seem OK. Is there any other log file that contains the messages or is it just that Linux doesn't log great many things? (2 Replies)
Discussion started by: gomes1333
2 Replies

4. Solaris

/var/adm/meesages file empty

Do not know the reason y messages file is empty already restarted the syslog daemon but still its showing empty . xxxxxxx# more /var/adm/messages xxxxxx# # ps -efo zone,pid,ppid,time,comm | grep syslog | grep global global 11861 1 00:10 /usr/sbin/syslogd svcs... (2 Replies)
Discussion started by: fugitive
2 Replies

5. Solaris

diff b/w /var/log/syslog and /var/adm/messages

hi sirs can u tell the difference between /var/log/syslogs and /var/adm/messages in my working place i am having two servers. in one servers messages file is empty and syslog file is going on increasing.. and in another servers message file is going on increasing but syslog file is... (2 Replies)
Discussion started by: tv.praveenkumar
2 Replies

6. Solaris

/var/adm/messages

Check message file and result posted below. Can anyone tell me what this is a sign of, what does it mean? server1% more messages.0 Dec 02 09:35:06 server1 bsd-gw: Inval id protocol request (65): AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA^\\2... (6 Replies)
Discussion started by: finster
6 Replies

7. Solaris

/var/adm/messages

Hello Friends, I am geting the folowing error in /var/adm/message is it disl related problem? if yes.. how to check all the disk are perfect or not? Sep 15 06:01:12 scsi: WARNING: /pci@1f,700000/scsi@2/sd@2,0 (sd7): Sep 15 06:01:12 Error for Command: write(10) Error Level:... (5 Replies)
Discussion started by: bullz26
5 Replies

8. UNIX for Dummies Questions & Answers

/var/adm/messages

Hi, No log entry is found in messages files. The file size is 0. We are using Solaris 9. Anyone knows what could be wrong. (3 Replies)
Discussion started by: FrankC
3 Replies

9. Solaris

/var/adm/messages

I'm running a Solaris 9 box with Oracle databases on it. I'm getting the following messages in my /var/adm/messages log "Jun 24 12:30:32 sundb01 bootpd: IP address not found: xxx.xxx.xxx.xxx" ...where xxx.xxx.xxx.xxx is DHCP IP addresses of Windows 2000 workstations in the organisation. ... (2 Replies)
Discussion started by: soliberus
2 Replies

10. UNIX for Dummies Questions & Answers

Messages in /var/adm

Just want to check with all of you out there what does the following warning means in my "messages" file in /var/adm the warning is Prevous Time Adjustment Incomplete , does it mean my hard ware is faulty if so which piece of hardware it is ? (1 Reply)
Discussion started by: owls
1 Replies
Login or Register to Ask a Question