LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices

Reply
 
Search this Thread
Old 12-06-2004, 10:59 AM   #1
mikeyt_333
Member
 
Registered: Jun 2001
Location: Up in the clouds
Distribution: Fedora et al.
Posts: 353

Rep: Reputation: 30
Syslog "randomly" stops, and doesn't restart at reboot


Hi,
I've recently set up a syslog box running slack 9. The server is handling massive input from various servers around my network. Our pix, packeteer, etc... are all logging to the syslog. I generate 2gig log files on a daily basis, and it is critical that this syslog bog is reliable. The wierd thing is, syslog appears to randomly stop working, with no mention in the log files or anything. When the syslog stops working, a reboot does not fix it, but a manual "./rc.syslog restart" does fix it. I really have no idea where to go with this because with syslog down there are no log messages to work with. I think the klogd does start though.

The only change I have made to the syslog system is the following two lines in the rc.syslog init script:

Code:
OPTS="-r"
Then in the line where the syslogd is called I added:

Code:
/bin/syslogd $OPTS
Forgive me if the paths are incorrect I don't have the box in front of me. I am also unsure of the syslog version, but the slack site says that it runs sysklogd-1.4.1. Any ideas are greatly appreciated!

Mike.
 
Old 12-06-2004, 11:49 AM   #2
bostontech
LQ Newbie
 
Registered: Dec 2004
Location: Boston
Distribution: all
Posts: 23

Rep: Reputation: 15
I would start by making sure there is no limit to the size of the log file being generated. When a file reaches the 2GB size it is considered by the OS as a "large file". Some applications have issues with dealing with "large files". I would try to setup a log rotation that rotates the logs and starts writing to a new log once you hit 2GB.

Send some more details to the problem if this doesn't solve it.

BTG
 
Old 12-06-2004, 03:35 PM   #3
mikeyt_333
Member
 
Registered: Jun 2001
Location: Up in the clouds
Distribution: Fedora et al.
Posts: 353

Original Poster
Rep: Reputation: 30
I'll look into size limits and let you know, thanks.
 
Old 12-07-2004, 09:08 AM   #4
mikeyt_333
Member
 
Registered: Jun 2001
Location: Up in the clouds
Distribution: Fedora et al.
Posts: 353

Original Poster
Rep: Reputation: 30
k, syslogd -rd shows a file size limit is being exceeded at 2gb. However I'm running reiserfs 3.6 and I quoth:

Quote:
max file size: 2^60 - bytes => 1 Ei, but page cache limits this to 8 Ti on architectures with 32 bit int.
this file size max is for version 3.6, and that is what I'm running. I'm wondering if it is a limit of the system, it's a PIII. Any ideas? I'd really rather not go the route of a cron job, I'd prefer having it accept whatever file size we deal out. There is nothing on the system that suggests this limit should exist. ulimit -a shows unlimited in most areas, including file size. Kernel 2.4.27. I'm baffled.

Thanks!

Last edited by mikeyt_333; 12-07-2004 at 10:28 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
"shutdown" and "halt" symlinks: poweroff, reboot. sud_crow Linux From Scratch 11 10-17-2006 11:03 PM
Can't run "halt" or "reboot" as user, can somebody help? ro_nicu Slackware 4 11-01-2004 07:57 AM
Tiny Sofa 2.0 - I thought "halt", "reboot" were only root command ?? sorcerer Linux - Distributions 1 08-21-2004 03:28 PM
"Call Trace" messages, change syslog level? robe Linux - General 0 06-08-2004 10:05 AM
Removing "shutdown" and "reboot" in logout window nearfar Red Hat 1 10-07-2003 11:33 AM


All times are GMT -5. The time now is 09:34 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration