Location of messages other than /var/log/messages?

HelpMe2877 · 07-06-2009, 09:41 AM

Hello,

Right now i'm trying to track a bug on our Kerio mail server and didn't see anything relevant in the /var/log/messages file, so I was wondering if a controller card might place messages in a different location? If so, where?
Thanks in advance!

unSpawn · 07-06-2009, 09:52 AM

/var/log/messages is used by syslogd. Syslogd logfile locations are configured in /etc/syslog.conf. Also, for instance if you think a logfile resides somewhere in /var, you could run 'lsof' as in 'lsof -P -w -n +D/var'. Or, if you know you run only one syslogd process you could find files it opens with 'lsof -P -w -n -p `pgrep syslogd`'.
* The "-P -w -n " isn't essential but speeds up running lsof because it needs to do less lookups.