LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 08-20-2009, 06:01 PM   #1
archey
LQ Newbie
 
Registered: Jun 2009
Posts: 27

Rep: Reputation: 15
system log error?


I have been getting this email every five minutes:

syslogd failed @ Thu Aug 20 21:48:35 2009. A restart was attempted automagically.
Service Check Method: [check command]

How can i fix this?
 
Old 08-20-2009, 06:58 PM   #2
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.8, Centos 5.10
Posts: 17,258

Rep: Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328
Check /var/log/messages to see why syslog is failing; could be out of disk space or trying to send log remotely and network cxn or emote system unavailable
 
Old 08-20-2009, 07:00 PM   #3
archey
LQ Newbie
 
Registered: Jun 2009
Posts: 27

Original Poster
Rep: Reputation: 15
okay, checked it an it's blank.
 
Old 08-20-2009, 07:12 PM   #4
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.8, Centos 5.10
Posts: 17,258

Rep: Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328
Should be a message somewhere, usually under /var.
Also check diskspace; post results of

df - k

Also add your distro & version to your profile so we can give more specific advice.
Post your syslog.conf file, should be in /etc
 
Old 08-20-2009, 07:17 PM   #5
archey
LQ Newbie
 
Registered: Jun 2009
Posts: 27

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by chrism01 View Post
Should be a message somewhere, usually under /var.
Also check diskspace; post results of

df - k

Also add your distro & version to your profile so we can give more specific advice.
Post your syslog.conf file, should be in /etc
OS: centos-5-x86

i dont know what you mean bye df - k, i ahve 17 gigs free of sapce, and i can't find my syslog.conf in /etc

BTW this is a VPS
 
Old 08-20-2009, 07:20 PM   #6
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.8, Centos 5.10
Posts: 17,258

Rep: Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328
Open a cmd line terminal eg xterm and type that (df -k) in.
Make sure you login as root and look for /etc/syslog.conf. If its not there try

find / -name syslog.conf -type f -print 2>/dev/null

that'll a take a few minutes to search the whole system.
 
Old 08-20-2009, 11:05 PM   #7
archey
LQ Newbie
 
Registered: Jun 2009
Posts: 27

Original Poster
Rep: Reputation: 15
did that, and it doesn't do anything just goes to a second line.
 
Old 08-20-2009, 11:15 PM   #8
jstephens84
Senior Member
 
Registered: Sep 2004
Location: Nashville
Distribution: Manjaro, RHEL, CentOS
Posts: 2,098

Rep: Reputation: 102Reputation: 102
Hey guys just a random stupid thought. But that could possibly why it is failing. If you don't have an /etc/syslog.conf then yeah it won't start.

How long has this problem been going on for? When did it start? What was the last thing done before this problem occured? Here is mine.

Try creating it under /etc/
Code:
#  /etc/syslog.conf	Configuration file for syslogd.
#
#			For more information see syslog.conf(5)
#			manpage.

#
# First some standard logfiles.  Log by facility.
#

auth,authpriv.*			/var/log/auth.log
*.*;auth,authpriv.none		-/var/log/syslog
#cron.*				/var/log/cron.log
daemon.*			-/var/log/daemon.log
kern.*				-/var/log/kern.log
lpr.*				-/var/log/lpr.log
mail.*				-/var/log/mail.log
user.*				-/var/log/user.log

#
# Logging for the mail system.  Split it up so that
# it is easy to write scripts to parse these files.
#
mail.info			-/var/log/mail.info
mail.warning			-/var/log/mail.warn
mail.err			/var/log/mail.err

# Logging for INN news system
#
news.crit			/var/log/news/news.crit
news.err			/var/log/news/news.err
news.notice			-/var/log/news/news.notice

#
# Some `catch-all' logfiles.
#
*.=debug;\
	auth,authpriv.none;\
	news.none;mail.none	-/var/log/debug
*.=info;*.=notice;*.=warning;\
	auth,authpriv.none;\
	cron,daemon.none;\
	mail,news.none		-/var/log/messages

#
# Emergencies are sent to everybody logged in.
#
*.emerg				*

#
# I like to have messages displayed on the console, but only on a virtual
# console I usually leave idle.
#
#daemon,mail.*;\
#	news.=crit;news.=err;news.=notice;\
#	*.=debug;*.=info;\
#	*.=notice;*.=warning	/dev/tty8

# The named pipe /dev/xconsole is for the `xconsole' utility.  To use it,
# you must invoke `xconsole' with the `-file' option:
# 
#    $ xconsole -file /dev/xconsole [...]
#
# NOTE: adjust the list below, or you'll go crazy if you have a reasonably
#      busy site..
#
daemon.*;mail.*;\
	news.err;\
	*.=debug;*.=info;\
	*.=notice;*.=warning	|/dev/xconsole
 
Old 08-21-2009, 12:17 AM   #9
archey
LQ Newbie
 
Registered: Jun 2009
Posts: 27

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by jstephens84 View Post
Hey guys just a random stupid thought. But that could possibly why it is failing. If you don't have an /etc/syslog.conf then yeah it won't start.

How long has this problem been going on for? When did it start? What was the last thing done before this problem occured? Here is mine.

Try creating it under /etc/
Code:
#  /etc/syslog.conf	Configuration file for syslogd.
#
#			For more information see syslog.conf(5)
#			manpage.

#
# First some standard logfiles.  Log by facility.
#

auth,authpriv.*			/var/log/auth.log
*.*;auth,authpriv.none		-/var/log/syslog
#cron.*				/var/log/cron.log
daemon.*			-/var/log/daemon.log
kern.*				-/var/log/kern.log
lpr.*				-/var/log/lpr.log
mail.*				-/var/log/mail.log
user.*				-/var/log/user.log

#
# Logging for the mail system.  Split it up so that
# it is easy to write scripts to parse these files.
#
mail.info			-/var/log/mail.info
mail.warning			-/var/log/mail.warn
mail.err			/var/log/mail.err

# Logging for INN news system
#
news.crit			/var/log/news/news.crit
news.err			/var/log/news/news.err
news.notice			-/var/log/news/news.notice

#
# Some `catch-all' logfiles.
#
*.=debug;\
	auth,authpriv.none;\
	news.none;mail.none	-/var/log/debug
*.=info;*.=notice;*.=warning;\
	auth,authpriv.none;\
	cron,daemon.none;\
	mail,news.none		-/var/log/messages

#
# Emergencies are sent to everybody logged in.
#
*.emerg				*

#
# I like to have messages displayed on the console, but only on a virtual
# console I usually leave idle.
#
#daemon,mail.*;\
#	news.=crit;news.=err;news.=notice;\
#	*.=debug;*.=info;\
#	*.=notice;*.=warning	/dev/tty8

# The named pipe /dev/xconsole is for the `xconsole' utility.  To use it,
# you must invoke `xconsole' with the `-file' option:
# 
#    $ xconsole -file /dev/xconsole [...]
#
# NOTE: adjust the list below, or you'll go crazy if you have a reasonably
#      busy site..
#
daemon.*;mail.*;\
	news.err;\
	*.=debug;*.=info;\
	*.=notice;*.=warning	|/dev/xconsole
Its been going for about a day and a half, started after i tried setting up my NS(which don't work!)
 
Old 08-21-2009, 12:50 AM   #10
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.8, Centos 5.10
Posts: 17,258

Rep: Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328Reputation: 2328
Unfortunately I don't have access to my Centos system right now, or I'd paste mine.
Certainly sounds like you've blown it away, unless you are in a chrooted env.
Hopefully a Centos or RHEL user will come along and post theirs. You could prob do worse than copy the one above for the moment. You'll need to restart syslogd.
 
Old 08-21-2009, 02:56 AM   #11
archey
LQ Newbie
 
Registered: Jun 2009
Posts: 27

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by chrism01 View Post
Unfortunately I don't have access to my Centos system right now, or I'd paste mine.
Certainly sounds like you've blown it away, unless you are in a chrooted env.
Hopefully a Centos or RHEL user will come along and post theirs. You could prob do worse than copy the one above for the moment. You'll need to restart syslogd.

Okay well I haven't done anything with the Files in my root, in FTP. I've noticed a couple that should be there but aren't like this one, and ips.remotedns.

EDIT: I think i have resolved this issue. I went into SSH and typed /etc/init.d/syslog restart and i got the error saying there was no such file or dir. So I ran rpm -q sysklogd that was empty, so I ran yum install sysklogd and restarted it twice.

Last edited by archey; 08-21-2009 at 03:45 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
system freeze, log shows eth1 error loserboy02 Linux - Networking 3 12-03-2008 01:41 PM
System Log error: xinetd -Transport endpoint is not connected then Linux - General 2 01-02-2008 09:36 AM
at boot up log in log out error snow bird Linux - Hardware 9 08-25-2007 01:42 AM
Error log in /var/log/messages raymond117 Linux - Security 9 01-26-2005 08:17 AM


All times are GMT -5. The time now is 12:38 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration