LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 02-23-2008, 09:06 AM   #1
elvisious
Member
 
Registered: Sep 2003
Distribution: Debian 5.0
Posts: 45

Rep: Reputation: 15
/var/log/messages is empty in Fedora Core 8


Hi,

I reinstalled my server with Fedora Core 8 and my /var/log/messages is empty. The date of the file is the date of the day en the time is 04:40. So logwatch is doing something whit it but why is it empty?



There is a file called lastlog in that same dir and the date and time of that file is changing a couple of time a day. So I guess lastlog is the right file but this is a binnary file?



help
 
Old 02-23-2008, 09:23 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,331
Blog Entries: 55

Rep: Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530
Is (r)syslogd running? If it is, does 'pgrep -f syslog|xargs -iP lsof -w -n -p 'P' +D/var/log' show it has /var/log/messages opened? Did you change anything in /etc/(r)syslog.conf? BTW, Logwatch only summarises log contents, it doesn't alter logs. Logfile management is done by 'logrotate'.
 
Old 02-23-2008, 09:25 AM   #3
rayfordj
Member
 
Registered: Feb 2008
Location: Texas
Distribution: Fedora, RHEL, CentOS
Posts: 488

Rep: Reputation: 78
lastlog just tracks user logins;
there should be a command 'lastlog' that you can run that reads this file and reports when the last time users logged in. there are some options to it if you want to review the man page for more info.

as far as messages... unusual.
try this if SELinux is set to Enforcing to see if it just has mislabeled contexts and syslogd is being denied access.

Code:
# restorecon -v /var/log/messages
# service rsyslog restart
# logger *****TEST*****
# grep TEST /var/log/messages
 
Old 02-23-2008, 09:39 AM   #4
elvisious
Member
 
Registered: Sep 2003
Distribution: Debian 5.0
Posts: 45

Original Poster
Rep: Reputation: 15
Hi

I disabled the rsyslogd daemon

Since when is it called rsyslogd? I always thought it was just syslogd whitout the 'r'.

When I want to enable / disable some daemons I use the command 'ntsysv'.
Is there an other (better) way to do this?
 
Old 02-23-2008, 09:41 AM   #5
rayfordj
Member
 
Registered: Feb 2008
Location: Texas
Distribution: Fedora, RHEL, CentOS
Posts: 488

Rep: Reputation: 78
i personally use 'chkconfig'; i don't know that i'd say it is better or worse but another way to do it.

ntsysv does the same thing but in a "cleaner" (menu driven) manner, allowing you to (de-)select multiple services at a time and then performing the actions chosen on completion;

Last edited by rayfordj; 02-23-2008 at 09:43 AM.
 
Old 02-24-2008, 09:40 AM   #6
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,331
Blog Entries: 55

Rep: Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530
Disabling (r)syslog is *not* at all good practice.
 
Old 02-25-2008, 06:46 AM   #7
elvisious
Member
 
Registered: Sep 2003
Distribution: Debian 5.0
Posts: 45

Original Poster
Rep: Reputation: 15
It was an accident.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
/var/log/messages empty turbo_acura Linux - Software 8 11-23-2007 09:07 AM
Empty /var/log/messages jstencil Slackware 1 10-13-2006 10:34 AM
/var/log/messages is empty, and also dmesg shows nothing beagle2 Linux - General 5 11-08-2005 09:12 AM
Redirecting the kernel messages to file other than /var/log/messages jyotika_b83 Linux - General 3 04-28-2005 07:39 PM
/var/log/messages empty Phathead Slackware 5 12-13-2004 12:43 PM


All times are GMT -5. The time now is 11:06 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration