LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
Reload this Page [SOLVED] nothing in /var/log/messages
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
Page 2 of 2 1 2
  Search this Thread
Old 06-18-2009, 01:28 PM   #16
divyashree
Senior Member
 
Registered: Apr 2007
Location: Bangalore, India
Distribution: RHEL,SuSE,CentOS,Fedora,Ubuntu
Posts: 1,386

Original Poster
Rep: Reputation: 135Reputation: 135

Quote:
Originally Posted by micxz View Post
I would try to add
Code:
*.*;
as in:
Code:
*.*;*.info;mail.none;authpriv.none;cron.none                /var/log/messages
and maybe restart syslog
Hello micxz if u will put *.* then all the facilities with all the levels will log to /var/log/messages

So according to you no meaning of other lines,and they will be messed up..
 
Old 06-18-2009, 02:00 PM   #17
DotHQ
Member
 
Registered: Mar 2006
Location: Ohio, USA
Distribution: Red Hat, Fedora, Knoppix,
Posts: 548

Rep: Reputation: 33
Very strange. When you log in a message should be put into the messages file. Your syslog.conf looks okay. No reason the syslog daemon should not write to messages.

Here is output from one of my RH boxes, just in case it might help shed some light on this:

# chkconfig --list | grep syslog
syslog 0-off 1-off 2-on 3-on 4-on 5-on 6-off
**note- had to change output from 1colon off to 1-off etc ..vb thought they were images and would not take my post.

# ps -ef | grep syslog
root 5176 1 0 May19 ? 00:00:02 syslogd -m 0
root 13727 2972 0 14:57 pts/0 00:00:00 grep syslog
 
Old 06-18-2009, 04:01 PM   #18
micxz
Senior Member
 
Registered: Sep 2002
Location: CA
Distribution: openSuSE, Cent OS, Slackware
Posts: 1,131

Rep: Reputation: 75
Quote:
Hello micxz if u will put *.* then all the facilities with all the levels will log to /var/log/messages
I was comparing my syslog.conf with yours and GlennsPref.
I think it actually means if not previously mentioned above in syslog.conf then log to this file or in other words save the rest in this file. But this still does not solve your issue of the messages file being empty.
Last edited by micxz; 06-18-2009 at 04:26 PM.
 
Old 06-19-2009, 03:11 AM   #19
divyashree
Senior Member
 
Registered: Apr 2007
Location: Bangalore, India
Distribution: RHEL,SuSE,CentOS,Fedora,Ubuntu
Posts: 1,386

Original Poster
Rep: Reputation: 135Reputation: 135
Quote:
Originally Posted by DotHQ View Post
Very strange. When you log in a message should be put into the messages file. Your syslog.conf looks okay. No reason the syslog daemon should not write to messages.

Here is output from one of my RH boxes, just in case it might help shed some light on this:

# chkconfig --list | grep syslog
syslog 0-off 1-off 2-on 3-on 4-on 5-on 6-off
**note- had to change output from 1colon off to 1-off etc ..vb thought they were images and would not take my post.

# ps -ef | grep syslog
root 5176 1 0 May19 ? 00:00:02 syslogd -m 0
root 13727 2972 0 14:57 pts/0 00:00:00 grep syslog
This is of mine
Code:
# chkconfig --list syslog
syslog          0:off   1:off   2:on    3:on    4:on    5:on    6:off
# ps -ef | grep syslog
root      2110     1  0 18:56 ?        00:00:00 syslogd -m 0
root      3601  3480  0 19:11 pts/4    00:00:00 grep syslog
 
Old 06-19-2009, 09:42 AM   #20
DotHQ
Member
 
Registered: Mar 2006
Location: Ohio, USA
Distribution: Red Hat, Fedora, Knoppix,
Posts: 548

Rep: Reputation: 33
I'm stumped at this point.
Your permissions for the messages files are just like mine (rw for root).
Owner and group is the same root.root
syslogd is running with the same options.
It 'should' be writing.

Are any of the logs in /var/log being written to?
Would you post a ls -l of /var/log?

Have you rebooted lately? If not reboot and see if that changes things. Something is hosed but I can't put my finger on it.
 
Old 06-19-2009, 11:42 PM   #21
divyashree
Senior Member
 
Registered: Apr 2007
Location: Bangalore, India
Distribution: RHEL,SuSE,CentOS,Fedora,Ubuntu
Posts: 1,386

Original Poster
Rep: Reputation: 135Reputation: 135
Quote:
Originally Posted by DotHQ View Post
I'm stumped at this point.
Your permissions for the messages files are just like mine (rw for root).
Owner and group is the same root.root
syslogd is running with the same options.
It 'should' be writing.

Are any of the logs in /var/log being written to?
Would you post a ls -l of /var/log?

Have you rebooted lately? If not reboot and see if that changes things. Something is hosed but I can't put my finger on it.
This is ,
Code:
# ls -lh  /var/log
total 5.7M
-rw-r----- 1 root  root   36K Jun 20 07:54 acpid
-rw-r----- 1 root  root   65K May 31 11:57 acpid.1
-rw------- 1 root  root  408K Apr 24 17:14 anaconda.log
-rw------- 1 root  root   19K Apr 24 17:14 anaconda.syslog
-rw------- 1 root  root   45K Apr 24 17:14 anaconda.xlog
drwxr-x--- 2 root  root  4.0K May 31 23:37 audit
-rw------- 1 root  root     0 Jun 14 16:32 boot.log
-rw------- 1 root  root     0 Jun  7 04:02 boot.log.1
-rw------- 1 root  root     0 May 31 11:57 boot.log.2
-rw------- 1 root  root     0 May 24 12:06 boot.log.3
-rw------- 1 root  root     0 May 17 08:15 boot.log.4
-rw------- 1 root  utmp  933K Jun 19 20:43 btmp
drwxr-xr-x 2 root  root  4.0K Jul 28  2006 conman
drwxr-xr-x 2 root  root  4.0K Jul 28  2006 conman.old
-rw------- 1 root  root     0 Jun 14 16:32 cron
-rw------- 1 root  root     0 Jun  7 04:02 cron.1
-rw------- 1 root  root     0 May 31 11:57 cron.2
-rw------- 1 root  root     0 May 24 12:06 cron.3
-rw------- 1 root  root     0 May 17 08:15 cron.4
drwxr-xr-x 2 lp    sys   4.0K Jun 14 16:32 cups
-rw-r--r-- 1 root  root   337 Jun 20 07:54 dkms_autoinstaller
-rw-r--r-- 1 root  root   16K Jun 20 07:53 dmesg
-rw------- 1 root  root   12K May 14 15:11 faillog
drwxr-xr-x 2 root  root  4.0K Jun 20 07:54 gdm
-rw-r--r-- 1 root  root  144K Jun 20 07:56 lastlog
drwxr-xr-x 2 root  root  4.0K Apr 24 17:07 mail
-rw------- 1 root  root     0 Jun 14 16:32 maillog
-rw------- 1 root  root     0 Jun  7 04:02 maillog.1
-rw------- 1 root  root     0 May 31 11:57 maillog.2
-rw------- 1 root  root     0 May 24 12:06 maillog.3
-rw------- 1 root  root     0 May 17 08:15 maillog.4
-rw------- 1 root  root     0 Jun 14 16:32 messages
-rw------- 1 root  root     0 Jun  7 04:02 messages.1
-rw------- 1 root  root     0 May 31 11:57 messages.2
-rw------- 1 root  root     0 May 24 12:06 messages.3
-rw------- 1 root  root     0 May 17 08:15 messages.4
drwx------ 2 root  root  4.0K Dec  1  2006 ppp
drwxr-xr-x 2 root  root  4.0K Apr 25 20:53 prelink
-rw-r--r-- 1 root  root   28K Jun 20 09:01 rpmpkgs
-rw-r--r-- 1 root  root   28K Jun 13 04:03 rpmpkgs.1
-rw-r--r-- 1 root  root   28K Jun  6 09:50 rpmpkgs.2
-rw-r--r-- 1 root  root   27K May 30 04:02 rpmpkgs.3
-rw-r--r-- 1 root  root   26K May 23 10:32 rpmpkgs.4
drwx------ 2 root  root  4.0K Sep  2  2006 samba
-rw-r--r-- 1 root  root   69K Jun  4 17:41 scrollkeeper.log
-rw------- 1 root  root     0 Jun 14 16:32 secure
-rw------- 1 root  root     0 Jun  7 04:02 secure.1
-rw------- 1 root  root     0 May 31 11:57 secure.2
-rw------- 1 root  root     0 May 24 12:06 secure.3
-rw------- 1 root  root     0 May 17 08:15 secure.4
drwxr-xr-x 2 root  root  4.0K Jun 14 16:32 setroubleshoot
-rw------- 1 root  root     0 Jun 14 16:32 spooler
-rw------- 1 root  root     0 Jun  7 04:02 spooler.1
-rw------- 1 root  root     0 May 31 11:57 spooler.2
-rw------- 1 root  root     0 May 24 12:06 spooler.3
-rw------- 1 root  root     0 May 17 08:15 spooler.4
drwxr-x--- 2 squid squid 4.0K Apr 26 16:49 squid
-rw------- 1 root  root     0 Apr 24 17:07 tallylog
drwxr-xr-x 2 root  root  4.0K Dec 18  2006 vbox
drwxr-xr-x 3 root  root  4.0K Jun 20 08:07 vmware
-rw------- 1 root  root  2.5K Jun 20 08:11 vsftpd.log
-rw-rw-r-- 1 root  utmp  1.3M Jun 20 07:56 wtmp
-rw-rw-r-- 1 root  utmp  2.2M Jun  1 13:51 wtmp.1
-rw------- 1 root  root   698 Jun 16 18:54 xferlog
-rw-r--r-- 1 root  root   47K Jun 20 07:54 Xorg.0.log
-rw-r--r-- 1 root  root   48K Jun 20 03:59 Xorg.0.log.old
-rw-r--r-- 1 root  root   834 May 31 23:39 Xorg.setup.log
-rw-r--r-- 1 root  root  8.3K Jun 20 08:02 yum.log
But one thing I dont know why there are a no of logfiles for one type of target as there should be one messages ,but here are 5 messages.
 
Old 06-20-2009, 02:20 AM   #22
Wim Sturkenboom
Senior Member
 
Registered: Jan 2005
Location: Roodepoort, South Africa
Distribution: Ubuntu 12.04, Antix19.3
Posts: 3,794

Rep: Reputation: 282Reputation: 282Reputation: 282
You know a lot more about those things than I do, but there is a vsftp.log. Might be in there.
Else, if you remember (part of) the message, grep for it.
 
Old 06-20-2009, 03:17 AM   #23
divyashree
Senior Member
 
Registered: Apr 2007
Location: Bangalore, India
Distribution: RHEL,SuSE,CentOS,Fedora,Ubuntu
Posts: 1,386

Original Poster
Rep: Reputation: 135Reputation: 135
Quote:
Originally Posted by Wim Sturkenboom View Post
You know a lot more about those things than I do, but there is a vsftp.log. Might be in there.
Else, if you remember (part of) the message, grep for it.
I knew some one will tell about vsftpd.log,but the vsftpd.log and xferlog logs only about transaction (dnld and upld) related issues..as mentioned below..

Code:
# cat vsftpd.log 
Thu Jun 18 05:00:15 2009 1 ::ffff:127.0.0.1 0 / b _ o a mozilla@example.com ftp 0 * i
Thu Jun 18 05:00:22 2009 1 ::ffff:127.0.0.1 0 /incoming b _ o a mozilla@example.com ftp 0 * i
Thu Jun 18 05:00:24 2009 1 ::ffff:127.0.0.1 0 / b _ o a mozilla@example.com ftp 0 * i
Thu Jun 18 05:00:26 2009 1 ::ffff:127.0.0.1 0 /pub b _ o a mozilla@example.com ftp 0 * i
Thu Jun 18 05:00:30 2009 3 ::ffff:127.0.0.1 603035 /pub/1stftp.txt b _ o a mozilla@example.com ftp 0 * c
Thu Jun 18 05:00:48 2009 1 ::ffff:127.0.0.1 0 / b _ o a mozilla@example.com ftp 0 * i
Thu Jun 18 05:01:59 2009 1 ::ffff:127.0.0.1 0 / b _ o a mozilla@example.com ftp 0 * i
Thu Jun 18 05:02:01 2009 1 ::ffff:127.0.0.1 0 /pub b _ o a mozilla@example.com ftp 0 * i
Thu Jun 18 05:02:03 2009 1 ::ffff:127.0.0.1 0 /pub/RH5 b _ o a mozilla@example.com ftp 0 * i
Thu Jun 18 05:02:15 2009 1 ::ffff:127.0.0.1 0 /pub/ b _ o a mozilla@example.com ftp 0 * i
Thu Jun 18 05:17:40 2009 1 ::ffff:127.0.0.1 0 /pub/RH5 b _ o a mozilla@example.com ftp 0 * i
Thu Jun 18 05:18:12 2009 1 ::ffff:127.0.0.1 0 /pub/RH5/Server b _ o a mozilla@example.com ftp 0 * i
Fri Jun 19 10:56:26 2009 1 ::ffff:127.0.0.1 0 / b _ o a mozilla@example.com ftp 0 * i
Fri Jun 19 10:56:29 2009 1 ::ffff:127.0.0.1 0 /incoming b _ o a mozilla@example.com ftp 0 * i
Fri Jun 19 10:56:33 2009 1 ::ffff:127.0.0.1 0 /pub b _ o a mozilla@example.com ftp 0 * i
Fri Jun 19 10:56:35 2009 1 ::ffff:127.0.0.1 0 /pub/RH5 b _ o a mozilla@example.com ftp 0 * i
Fri Jun 19 11:00:33 2009 1 ::ffff:127.0.0.1 951 /pub/RH5/Server/repodata/repomd.xml b _ o a anonymous@ ftp 0 * c
Fri Jun 19 11:00:33 2009 1 ::ffff:127.0.0.1 745268 /pub/RH5/Server/repodata/primary.xml.gz b _ o a anonymous@ ftp 0 * c
Fri Jun 19 11:13:05 2009 1 ::ffff:127.0.0.1 0 / b _ o a mozilla@example.com ftp 0 * i
Fri Jun 19 11:13:08 2009 1 ::ffff:127.0.0.1 0 /pub b _ o a mozilla@example.com ftp 0 * i
Fri Jun 19 11:13:11 2009 1 ::ffff:127.0.0.1 0 /pub/RH5 b _ o a mozilla@example.com ftp 0 * i
Fri Jun 19 11:13:20 2009 1 ::ffff:127.0.0.1 0 /pub/RH5/Server b _ o a mozilla@example.com ftp 0 * i
Sat Jun 20 02:39:50 2009 1 ::ffff:127.0.0.1 951 /pub/RH5/Server/repodata/repomd.xml b _ o a anonymous@ ftp 0 * c
Sat Jun 20 02:39:55 2009 1 ::ffff:127.0.0.1 282184 /pub/RH5/Server/dhcp-3.0.5-3.el5.i386.rpm b _ o a anonymous@ ftp 0 * i
Sat Jun 20 02:40:00 2009 1 ::ffff:127.0.0.1 894675 /pub/RH5/Server/dhcp-3.0.5-3.el5.i386.rpm b _ o a anonymous@ ftp 0 * c
Sat Jun 20 02:41:58 2009 1 ::ffff:127.0.0.1 1164 /pub/RH5/RPM-GPG-KEY-redhat-release b _ o a lftp@ ftp 0 * c
[root@localhost log]# cat xferlog 
Mon Jun 15 13:02:16 2009 1 127.0.0.1 0 / b _ o a mozilla@example.com ftp 0 * i
Mon Jun 15 13:02:21 2009 1 127.0.0.1 0 /pub b _ o a mozilla@example.com ftp 0 * i
Mon Jun 15 13:02:23 2009 1 127.0.0.1 0 / b _ o a mozilla@example.com ftp 0 * i
Mon Jun 15 13:03:16 2009 1 127.0.0.1 0 /pub b _ o a mozilla@example.com ftp 0 * i
Mon Jun 15 13:03:22 2009 5 127.0.0.1 603035 /pub/1stftp.txt b _ o a mozilla@example.com ftp 0 * c
Mon Jun 15 13:04:41 2009 1 122.50.139.175 0 / b _ o a mozilla@example.com ftp 0 * i
Mon Jun 15 13:04:49 2009 1 122.50.139.175 0 /pub b _ o a mozilla@example.com ftp 0 * i
Tue Jun 16 13:24:09 2009 7 ::ffff:127.0.0.1 113788806 /home/manan/testRH5/lftp.txt b _ i r manan ftp 0 * c
 
Old 06-20-2009, 03:28 AM   #24
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
You can remove the syslog package and install syslog-ng.
I had a similar problem once with a Suse box and the only way to solve it was the above.
BTW, syslog was logging if it was ran in debug mode, but not if ran as a daemon!!!
Last edited by bathory; 06-20-2009 at 08:22 AM.
 
Old 06-20-2009, 05:23 AM   #25
avijitp
Member
 
Registered: May 2005
Location: India
Distribution: FC11, Debian/Ubuntu, RHEL, Solaris, AIX, HP-UX
Posts: 161

Rep: Reputation: 32
Did you try a restart of syslog daemon to see if that has helped. Also make sure that /var/log filesystem has enough space.
 
Old 06-20-2009, 07:40 AM   #26
okcomputer44
Member
 
Registered: Jun 2008
Location: /home/laz
Distribution: CentOS/Debian
Posts: 246

Rep: Reputation: 53
Quote:
Originally Posted by bathory View Post
You can remove the syslog package and install syslog-ng.
I had a similar problem once with a Suse box and the only way to solve it was the above.
BTW, syslog was logging if it was ran in debug mode, but not was it was ran as a daemon!!!
Yeah, I had problem with samba authentication. I don't know what was exactly but to remove then reinstall the package helped. (just like on M$ box)
 
Old 06-20-2009, 10:52 PM   #27
micxz
Senior Member
 
Registered: Sep 2002
Location: CA
Distribution: openSuSE, Cent OS, Slackware
Posts: 1,131

Rep: Reputation: 75
here's a interesting link:
http://www.softpanorama.org/Logs/Sys...ebugging.shtml
 
Old 06-25-2009, 04:02 AM   #28
divyashree
Senior Member
 
Registered: Apr 2007
Location: Bangalore, India
Distribution: RHEL,SuSE,CentOS,Fedora,Ubuntu
Posts: 1,386

Original Poster
Rep: Reputation: 135Reputation: 135
I finally decided to do a fresh installation as these problems cant be solved anyway ....
 
  


Reply
Page 2 of 2 1 2



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
/var/log/messages and /var/log/cron not working sigkill Linux - Software 6 08-09-2008 01:08 PM
Redirecting the kernel messages to file other than /var/log/messages jyotika_b83 Linux - General 3 04-28-2005 06:39 PM
Deleted /var/log/messages, can't log any files-iptables chingyenccy Linux - Newbie 7 02-27-2005 04:03 PM
/var/log/messages full of these messages. Should I be concerned? mdavis Linux - Security 5 04-16-2004 10:08 AM
iptables, changing log file from /var/log/messages acid2000 Linux - Networking 3 03-11-2003 08:38 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 03:35 AM.

Contact Us - Advertising Info - Rules - Privacy - LQ Merchandise - Donations - Contributing Member - LQ Sitemap -
Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration