/var/log/messages empty

Harlin · 07-14-2008, 10:16 AM

My last 10 /var/log/messages have been empty. I've verified that syslog is running. Any idea what could be wrong? The permissions on them are 600.

thanks!

unSpawn · 07-14-2008, 11:06 AM

Can you verify syslog has the file opened (something like 'lsof -w -n -p `pgrep syslog`' or a 'pgrep -f syslog' and 'fuser /var/log/messages' combo)? Can you verify using something like 'logger PING' an entry can be made? What does your syslog.conf look like? If necessary, can you trace back changes made to the conf, package contents, kernel?

anomie · 07-14-2008, 11:07 AM

Is this Slackware?

Try:
$ logger Testing

Anything show up in your current messages?

----

edit:.. too slow.