LinuxQuestions.org - system log error?

- Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)

- - system log error? (https://www.linuxquestions.org/questions/linux-newbie-8/system-log-error-749139/)

system log error?

I have been getting this email every five minutes:

syslogd failed @ Thu Aug 20 21:48:35 2009. A restart was attempted automagically.
Service Check Method: [check command]

How can i fix this?

Check /var/log/messages to see why syslog is failing; could be out of disk space or trying to send log remotely and network cxn or emote system unavailable

okay, checked it an it's blank.

Should be a message somewhere, usually under /var.
Also check diskspace; post results of

df - k

Also add your distro & version to your profile so we can give more specific advice.
Post your syslog.conf file, should be in /etc

Quote:

Originally Posted by chrism01 (Post 3651630)

OS: centos-5-x86

i dont know what you mean bye df - k, i ahve 17 gigs free of sapce, and i can't find my syslog.conf in /etc

BTW this is a VPS

Open a cmd line terminal eg xterm and type that (df -k) in.
Make sure you login as root and look for /etc/syslog.conf. If its not there try

find / -name syslog.conf -type f -print 2>/dev/null

that'll a take a few minutes to search the whole system.

did that, and it doesn't do anything just goes to a second line.

Hey guys just a random stupid thought. But that could possibly why it is failing. If you don't have an /etc/syslog.conf then yeah it won't start.

How long has this problem been going on for? When did it start? What was the last thing done before this problem occured? Here is mine.

Try creating it under /etc/

Code:

#  /etc/syslog.conf        Configuration file for syslogd.

#

#                        For more information see syslog.conf(5)

#                        manpage.



#

# First some standard logfiles.  Log by facility.

#



auth,authpriv.*                        /var/log/auth.log

*.*;auth,authpriv.none                -/var/log/syslog

#cron.*                                /var/log/cron.log

daemon.*                        -/var/log/daemon.log

kern.*                                -/var/log/kern.log

lpr.*                                -/var/log/lpr.log

mail.*                                -/var/log/mail.log

user.*                                -/var/log/user.log



#

# Logging for the mail system.  Split it up so that

# it is easy to write scripts to parse these files.

#

mail.info                        -/var/log/mail.info

mail.warning                        -/var/log/mail.warn

mail.err                        /var/log/mail.err



# Logging for INN news system

#

news.crit                        /var/log/news/news.crit

news.err                        /var/log/news/news.err

news.notice                        -/var/log/news/news.notice



#

# Some `catch-all' logfiles.

#

*.=debug;\

        auth,authpriv.none;\

        news.none;mail.none        -/var/log/debug

*.=info;*.=notice;*.=warning;\

        auth,authpriv.none;\

        cron,daemon.none;\

        mail,news.none                -/var/log/messages



#

# Emergencies are sent to everybody logged in.

#

*.emerg                                *



#

# I like to have messages displayed on the console, but only on a virtual

# console I usually leave idle.

#

#daemon,mail.*;\

#        news.=crit;news.=err;news.=notice;\

#        *.=debug;*.=info;\

#        *.=notice;*.=warning        /dev/tty8



# The named pipe /dev/xconsole is for the `xconsole' utility.  To use it,

# you must invoke `xconsole' with the `-file' option:

# 

#    $ xconsole -file /dev/xconsole [...]

#

# NOTE: adjust the list below, or you'll go crazy if you have a reasonably

#      busy site..

#

daemon.*;mail.*;\

        news.err;\

        *.=debug;*.=info;\

        *.=notice;*.=warning        |/dev/xconsole

Quote:

Originally Posted by jstephens84 (Post 3651816)

Code:

#  /etc/syslog.conf        Configuration file for syslogd.

#

#                        For more information see syslog.conf(5)

#                        manpage.



#

# First some standard logfiles.  Log by facility.

#



auth,authpriv.*                        /var/log/auth.log

*.*;auth,authpriv.none                -/var/log/syslog

#cron.*                                /var/log/cron.log

daemon.*                        -/var/log/daemon.log

kern.*                                -/var/log/kern.log

lpr.*                                -/var/log/lpr.log

mail.*                                -/var/log/mail.log

user.*                                -/var/log/user.log



#

# Logging for the mail system.  Split it up so that

# it is easy to write scripts to parse these files.

#

mail.info                        -/var/log/mail.info

mail.warning                        -/var/log/mail.warn

mail.err                        /var/log/mail.err



# Logging for INN news system

#

news.crit                        /var/log/news/news.crit

news.err                        /var/log/news/news.err

news.notice                        -/var/log/news/news.notice



#

# Some `catch-all' logfiles.

#

*.=debug;\

        auth,authpriv.none;\

        news.none;mail.none        -/var/log/debug

*.=info;*.=notice;*.=warning;\

        auth,authpriv.none;\

        cron,daemon.none;\

        mail,news.none                -/var/log/messages



#

# Emergencies are sent to everybody logged in.

#

*.emerg                                *



#

# I like to have messages displayed on the console, but only on a virtual

# console I usually leave idle.

#

#daemon,mail.*;\

#        news.=crit;news.=err;news.=notice;\

#        *.=debug;*.=info;\

#        *.=notice;*.=warning        /dev/tty8



# The named pipe /dev/xconsole is for the `xconsole' utility.  To use it,

# you must invoke `xconsole' with the `-file' option:

# 

#    $ xconsole -file /dev/xconsole [...]

#

# NOTE: adjust the list below, or you'll go crazy if you have a reasonably

#      busy site..

#

daemon.*;mail.*;\

        news.err;\

        *.=debug;*.=info;\

        *.=notice;*.=warning        |/dev/xconsole

Its been going for about a day and a half, started after i tried setting up my NS(which don't work!)

Unfortunately I don't have access to my Centos system right now, or I'd paste mine.
Certainly sounds like you've blown it away, unless you are in a chrooted env.
Hopefully a Centos or RHEL user will come along and post theirs. You could prob do worse than copy the one above for the moment. You'll need to restart syslogd.

Quote:

Originally Posted by chrism01 (Post 3651876)

Okay well I haven't done anything with the Files in my root, in FTP. I've noticed a couple that should be there but aren't like this one, and ips.remotedns.

EDIT: I think i have resolved this issue. I went into SSH and typed /etc/init.d/syslog restart and i got the error saying there was no such file or dir. So I ran rpm -q sysklogd that was empty, so I ran yum install sysklogd and restarted it twice.