Whats the equivalent on Linux for /var/adm/syslog?

eDubster · 05-15-2003, 03:53 PM

Hi All,

I am running some load test on RedHat 7.2. somehow the box keeps crashing...I checked /var/log/messages... dont find anything useful... are there other logs that log system events?

TIA

manthram · 05-15-2003, 04:00 PM

you can check /var/log/syslog also. and there are program specific logs in the /var/log directory

eDubster · 05-15-2003, 04:09 PM

thanks. no syslog entry under my /var/log...according the the last entries in /var/log/messages, nothing out of oirdinary...

trickykid · 05-15-2003, 04:23 PM

About every distro I've dealt with had they syslog in /var/log

Check your /etc/syslog.conf and see how yours might be setup, sometimes you may not have a syslog file but only your messages file and any other log files, etc.

eDubster · 05-15-2003, 04:49 PM

here is the config file:

# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.* /dev/console

# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none /var/log/messages

# The authpriv file has restricted access.
authpriv.* /var/log/secure

# Log all the mail messages in one place.
mail.* /var/log/maillog

# Log cron stuff
cron.* /var/log/cron

# Everybody gets emergency messages
*.emerg *

# Save news errors of level crit and higher in a special file.
uucp,news.crit /var/log/spooler

# Save boot messages also to boot.log
local7.* /var/log/boot.log

there is no entry in the /var/log/spooler where supposedly the errors of crit and higher are logged...

moses · 05-15-2003, 08:02 PM

Add the following to your syslog.conf and the check to see if syslogd is running. If it is, restart it with a "kill -HUP pid" where pid is the process id of syslog.

Code:

# Log anything 'warn' or higher.
# Exclude authpriv, cron, mail, and news.  These are logged elsewhere.
*.warn;\
        authpriv.none;cron.none;mail.none;news.none     /var/log/syslog