Previously, /var/log/messages was filled with the usual stuff. Now its empty. Any suggestions as to what I've done?
On Sun, 19 Apr 2009 13:10:39 -0700 Geoffrey Leach wrote:
Previously, /var/log/messages was filled with the usual stuff. Now its empty. Any suggestions as to what I've done?
logrotate moves /var/log/messages to /var/log/messages-todaysdate once in a while.
On 04/19/2009 01:39:54 PM, Frank Cox wrote:
On Sun, 19 Apr 2009 13:10:39 -0700 Geoffrey Leach wrote:
Previously, /var/log/messages was filled with the usual stuff. Now
its
empty. Any suggestions as to what I've done?
logrotate moves /var/log/messages to /var/log/messages-todaysdate once in a while.
Thanks, but that's not the problem. I've got several rotated logs with content, and one without.
logrotate moves /var/log/messages to /var/log/messages-todaysdate once in a while.
Thanks, but that's not the problem. I've got several rotated logs with content, and one without.
I think you may have missed the point: If logrotate swapped it, and nothing new has been logged, it could be empty.
# logger Foo # tail /var/log/messages
What you get?
On 04/19/2009 02:29:38 PM, Joseph L. Casale wrote:
logrotate moves /var/log/messages to /var/log/messages-todaysdate once in a while.
Thanks, but that's not the problem. I've got several rotated logs
with
content, and one without.
I think you may have missed the point: If logrotate swapped it, and nothing new has been logged, it could be empty.
# logger Foo # tail /var/log/messages
What you get?
root@pvr[7]->logger Foo root@pvr[8]->tail /var/log/messages root@pvr[9]->
Geoffrey Leach wrote:
On 04/19/2009 02:29:38 PM, Joseph L. Casale wrote:
logrotate moves /var/log/messages to /var/log/messages-todaysdate once in a while.
Thanks, but that's not the problem. I've got several rotated logs
with
content, and one without.
I think you may have missed the point: If logrotate swapped it, and nothing new has been logged, it could be empty.
# logger Foo # tail /var/log/messages
What you get?
root@pvr[7]->logger Foo root@pvr[8]->tail /var/log/messages root@pvr[9]->
It sounds like the log file may have been deleted/recreated without rsyslog being restarted. Try running "service rsyslog reload" or "service rsyslog restart" and see if that helps. It is possible for a process to keep writing to a file it had open, even if the file has ben deleter.
Mikkel
Mikkel L. Ellertson wrote, On 04/19/2009 08:53 PM:
Geoffrey Leach wrote:
On 04/19/2009 02:29:38 PM, Joseph L. Casale wrote:
logrotate moves /var/log/messages to /var/log/messages-todaysdate once in a while.
Thanks, but that's not the problem. I've got several rotated logs
with
content, and one without.
I think you may have missed the point: If logrotate swapped it, and nothing new has been logged, it could be empty.
# logger Foo # tail /var/log/messages
What you get?
root@pvr[7]->logger Foo root@pvr[8]->tail /var/log/messages root@pvr[9]->
It sounds like the log file may have been deleted/recreated without rsyslog being restarted. Try running "service rsyslog reload" or "service rsyslog restart" and see if that helps. It is possible for a process to keep writing to a file it had open, even if the file has ben deleter.
Mikkel
Which fedora? I have seen a symptom like this before. suggestion, check to see how many sysloger's you have... rpm -qa |grep syslog https://bugzilla.redhat.com/show_bug.cgi?id=441664
Though I think Peter fixed it so they should work together now (at least for F10).