I have a problem with a syslog on RHEL4.

It doesn't log since day one although it does run.

# service syslog status
syslogd (pid 2656) is running...
klogd (pid 2660) is running...

Here is my syslog.conf
---
# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.* /dev/console

# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none /var/log/messages

# The authpriv file has restricted access.
authpriv.* /var/log/secure

# Log all the mail messages in one place.
mail.* -/var/log/maillog


# Log cron stuff
cron.* /var/log/cron

# Everybody gets emergency messages
*.emerg *

# Save news errors of level crit and higher in a special file.
uucp,news.crit /var/log/spooler

# Save boot messages also to boot.log
local7.* /var/log/boot.log

Does it log anything at all? Have you tried restarting it? If it still doesn't work, hmmm...do an strace on the pid and see if it hangs up on something.

-twantrd

I'd use the "logger" command to test, or I'd kill the running syslogd and kick it off in debug mode (-d) and watch it in the foreground.

This is what I got from strace. This segment repeats on and on ... Honestly doesn't mean anything to me. If somebody can help?


Process 6427 attached - interrupt to quit
select(1, [], NULL, NULL, NULL) = ? ERESTARTNOHAND (To be restarted)
--- SIGALRM (Alarm clock) @ 0 (0) ---
rt_sigaction(SIGALRM, {0xc5dd46, [ALRM], SA_RESTORER, 0xdff8e8}, {0xc5dd46, [ALRM], SA_RESTORER, 0xdff8e8}, 8) = 0
alarm(30) = 0
rt_sigaction(SIGALRM, NULL, {0xc5dd46, [ALRM], SA_RESTORER, 0xdff8e8}, 8) = 0
rt_sigaction(SIGALRM, {0xc5dd46, [ALRM], SA_RESTORER, 0xdff8e8}, NULL, 8) = 0
sigreturn()