I am running RHEL 4.0. When I checked my system logs I noticed that not all of the logs were updating. System Log, Boot Log, Security Log were not updating. X.ORGX11LOg, Audit, wtmp, Lastlog were some of the logs that were updating. The previous time that I had checked on the logs all were updating. I think I have restarted the appropriate services but I an new to Linux and may have missed something. Any help would be appreciated

Blackcloud1

These are the filenames to check syslogd is currently configured to log to: 'awk '/\/var\/log/ {print $NF}' /etc/syslog.conf'
These are the filenames to check that are opened by the running syslogd: 'lsof -w -n +D/var/log | awk '/syslogd/ {print $2, $NF}''.
These are the pids of syslogd: 'pgrep -lf syslog' which should correspond with lsof output.

Note that if you need to manually restart applications to get them logging again there is something wrong. It could point to say logrotate or "tail" following the wrong file descriptor, but only a detailed description of the situation from you could shed a light on this.

Also note some files don't get updated except on boot (boot.log), some are not logged to unless the X process is running and needs to (X11/Xorg), some won't be logged to unless the daemon is running (Auditd, audit.log) and some don't get used unless there's a login of sorts (faillog, btmp, lastlog, utmp, wtmp, like that). If I am allowed to nit for a second please note there is no "System Log" or "Security Log" or "X.ORGX11LOg", the proper names are "messages", "secure" and "Xorg.0.log", possibly prefixed with full path if configured other than default.