syslog stops writing in log

doru · 09-13-2010, 02:14 AM

syslog stops writing immediately after log rotation, after I start the system (but not after reboot), and at some other times, into my fast cgi application's log. It starts working after /etc/init.d/sysklogd restart. Please give me any hint.

Configuration:

I am using Ubuntu 8.04 lts server, Apache web server.

My (fast cgi) application uses:

Code:

#include <syslog.h>
syslog(LOG_LOCAL6|LOG_INFO, "new n= %d;\n", count);

to log some activity messages.
At the end of /etc/syslog.conf I added:

Code:

local6.=info -/var/log/apache2/myapp.log

In /etc/syslog.conf I added to each selector which contained "myapp.log":

Code:

;local6.!=info

like this:

Code:

*.*;auth,authpriv.none;local6.!=info            -/var/log/syslog

and:

Code:

*.=info;*.=notice;*.=warn;\
         auth,authpriv.none;\
         cron,daemon.none;\
         mail,news.none;local6.!=info            -/var/log/messages

doru · 09-16-2010, 03:08 AM

It seems that syslog ceases to function when syslogd is restarted automatically. This happens when I start or reboot the computer and when logs are rotated. After I:

Code:

/etc/init.d/sysklogd restart

it all goes well. This is true for my fcgi application only, other system pre-configured logs work fine.

fflush(NULL); and closelog(); do not seem to make any difference.

I was amazed today to discover that:

Code:

wget localhost/myapp.fcgi?some%20data

issued locally as root is logged well after I started the system, but access requests from other locations were not logged unless I did /etc/init.d/sysklogd restart.

And this is also a BUMP.

Doru

doru · 09-17-2010, 03:20 AM

I modified:
/etc/init.d/sysklogd reload-or-restart > /dev/null
into:
/etc/init.d/sysklogd restart > /dev/null
in:
/etc/cron.{weekly,daily}/sysklogd

and now I got it going, I believe. However, I don't like this solution, because I don't know what is going on here.

Other people have got the same problem:
http://www.linuxquestions.org/questi...8-04-a-703386/

Doru

doru · 09-19-2010, 11:31 PM

The solution in my last post seems to be working. It works after the daily rotation. Thank you, Doru!

Doru