OS: Suse 8
Kernel : 2.4.21-278-smp

Problem:
One of the linux box having problem not getting the /var/adm/messages updated.
The details are given below.
XXX:/var/adm # ls -al messages*
-rw-r--r-- 1 root root 0 Dec 15 12:05 messages
-rw-r--r-- 1 root root 41979 Jul 23 23:00 messages.0.gz
-rw-r--r-- 1 root root 43401 Jul 16 23:00 messages.1.gz
-rw-r--r-- 1 root root 40627 Jul 9 23:00 messages.2.gz
-rw-r--r-- 1 root root 39977 Jul 2 23:00 messages.3.gz

First I verified the status of syslog
XXX # rcsyslog status
Checking for service syslog: Dead

Then restarted the syslog daemon
XXX # rcsyslog status
Checking for service syslog: running

But still the message file is not getting updated.
Pls help to look into this issue.


Devadas VM

Is "messages" supposed to be in /var/adm instead of /var/log on Suse?

When I first started doing Linux I kept mistakenly looking in /var/adm since that is where most UNIX flavors keep system logs but on Debian and Rehdhat its in /var/log rather than /var/adm.

the above reply is useles..
plz help me

Hi,

Why is jlightner's answer useless?? You could at least tell us (the persons willing to help) why a particular answer is useless or helpful.

Besides that: jlightner has a very valid point. I've used suse up to version 8 and messages were logged in /var/log, not var/adm.

- did you change the location yourself?
- did you check /etc/syslog.conf to check the actual log locations and rules?
- did you check the startup file?
- did you find out why the syslog daemon wasn't running in the first place?

Having been to India I'm surprised to find someone as rude as you claiming to be from there. Most Indians I met were very polite. In future you might thank the poster for his input then attempt to reclarify your question or at the very least just ignore the post at all. I'll forego bothering to add my "useless" input on any future posts I see by you.

[sorry!!! if hurted someone's/group's feeling]
we use /var/adm location for log files.
couldn't find the exact reason for why the syslog daemon dead in first place.

see some more deatils

/etc # ls -al syslog*
-rw------- 1 root root 366 Jul 30 14:30 syslog.conf
-rw-r--r-- 1 root root 0 Jul 30 13:53 syslog.conf.17943
-rw-r--r-- 1 root root 0 Jul 30 13:58 syslog.conf.3833

==================================================================================
/etc # more syslog.conf
*.err -/var/adm/messages
kern.debug -/var/adm/messages
daemon.notice -/var/adm/messages
mail.crit -/var/adm/messages
*.* -/var/adm/messages
*.alert root
# Tivoli logfile adapter entry, ID=
*.emerg;*.alert;*.crit;*.err;*.warning;*.notice;*.info /tmp/.tivoli/.tecad_logfile.fifo.stp05508.
# End of logfile adapter entry, ID=
stp05508:/etc # more syslog.conf.FUSE.1134011953
# /etc/syslog.conf - Configuration file for syslogd(8)
#
# For info about the format of this file, see "man syslog.conf".
#

#
#
# print most on tty10 and on the xconsole pipe
#
kern.warn;*.err;authpriv.none /dev/tty10
kern.warn;*.err;authpriv.none |/dev/xconsole
*.emerg *

# enable this, if you want that root is informed
# immediately, e.g. of logins
#*.alert root


#
# all email-messages in one file
#
mail.* -/var/log/mail

#
# all news-messages
#
# these files are rotated and examined by "news.daily"
news.crit -/var/log/news/news.crit
news.err -/var/log/news/news.err
news.notice -/var/log/news/news.notice
# enable this, if you want to keep all news messages
# in one file
#news.* -/var/log/news.all

#
# Warnings in one file
#
*.=warn;*.=err -/var/log/warn
*.crit /var/log/warn

#
# save the rest in one file
#
*.*;mail.none;news.none -/var/log/messages

#
# enable this, if you want to keep all messages
# in one file
#*.* -/var/log/allmessages

#
# Some foreign boot scripts require local7
#
local0,local1.* -/var/log/localmessages
local2,local3.* -/var/log/localmessages
local4,local5.* -/var/log/localmessages
local6,local7.* -/var/log/localmessages
===================================================================================

rcsyslog status
Checking for service syslog: Running
===================================================================================