LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 02-16-2004, 04:54 AM   #1
dholingw
Member
 
Registered: Dec 2003
Distribution: Cent OS 4.1
Posts: 38

Rep: Reputation: 15
Mail Log has died!


Hi all.

Not to sure what’s gone wrong here. Last night at 4:03 AM log rotate did its thing, and archived the last weeks mail logs, or whatever it does every Sunday morning. But, for some strange reason, nothing has been logged to /var/log/maillog ever since –it’s just an empty file now.

I’ve restarted syslog, sendmail, and everything else I can think of, but still nothing. Another question would be, what would sendmail be logging to then? At first I thought it may have been some sort of security breech, but according to the file time on /var/log/maillog, this happened right after log rotate completed. Has anyone had this happen before? Any insight here would be appreciated, as I NEED my mail logs.

Much thanks,

Dave H

Last edited by dholingw; 02-16-2004 at 10:26 AM.
 
Old 02-17-2004, 08:54 AM   #2
ScooterB
Member
 
Registered: Sep 2003
Location: NW Arkansas
Distribution: Linux Redhat 9.0, Fedora Core 2,Debian 3.0, Win 2K, Win95, Win98, WinXp Pro
Posts: 344

Rep: Reputation: 31
I don't know if you have checked these or not, but look at the following files:
/etc/log.d/logwatch.conf
/etc/syslog.conf
/etc/log.d/services/sendmail.conf
Make sure that the references are in place for sendmail. I would also check and make sure that all of the links are in place and not corrupted in the /etc/rc.d/rc0-6.d/"xxx"syslog (x's mean the different k or s numbers. You can do a "locate syslog" and find the correct path to these in your system. It may be that something got corrupted or overwritten when doing the rotate. One thing also occurred to me and I don't know the correctness of my thought, but is your /var/log/xxx files on a separate partition? It may be that the partition is full? Like I say, I am not sure how Linux responds in that particular instance. You might also do a ps aux from the command line and verify that the log.d daemon is running. Just a few thoughts. Good Luck!
 
Old 02-17-2004, 02:00 PM   #3
dholingw
Member
 
Registered: Dec 2003
Distribution: Cent OS 4.1
Posts: 38

Original Poster
Rep: Reputation: 15
Hey thanks Scooter.

You know what it was? I was messing with the settings for maillog in Webmin. Several weeks ago, I played around with the ‘facilities’ and ‘Priorities’ settings. For some stupid reason, I left the Priorities setting at “none.”

Everything continued to function as normal. What’s strange is that I’ve restarted the server several times since that point, and still… Mail logs continued to show up as normal.

It seems that the changes I made, (the messed up changes) suddenly took effect when log rotate ran early Sunday morning, thus it stopped logging mail activity. When I finally compared logwatch.conf with a backed up version, I noticed the mail logging option set to “none”-duh…

So there you have it. Despite the fact that syslog had been restarted several times after my messed up changes, they never took effect until log rotate ran, which is why I assumed there to be no problem with the configuration settings. Another 6-hours burned up ):

Thanks very much again for your suggestions,
 
Old 02-17-2004, 03:03 PM   #4
ScooterB
Member
 
Registered: Sep 2003
Location: NW Arkansas
Distribution: Linux Redhat 9.0, Fedora Core 2,Debian 3.0, Win 2K, Win95, Win98, WinXp Pro
Posts: 344

Rep: Reputation: 31
You're quite welcome and good job on finding the fix. I have often found that I have been my biggest problem. usually something I did or did not do. Good luck in the future!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
error: mail command failed for /var/log/squidguard/squidGuard.log.6 Niceman2005 Linux - Networking 1 01-22-2009 02:24 PM
qmail log says mail delivered, mail nowhere to be found svartrev Linux - Software 0 03-24-2004 06:12 PM
RedHat style e-mail log? k1e0x Debian 1 11-03-2003 02:22 AM
Squirrel Mail -- Not able to log in AnthonyM Debian 11 10-07-2003 01:56 PM
parsing mail.log with perl and calculate mail traffic on domain base markus1982 Programming 1 03-18-2003 07:22 AM


All times are GMT -5. The time now is 12:04 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration