no syslog?

slackhack · 2005-10-24 20:18:03

i went to read syslog, and there is none. :confused: there's a syslog.log, but it's full of junk every ten minutes about STATS: dropped (what is that? something to do with archstats? i changed syslog.conf to change it to every hour as described in some other thread, but it's still logging every 10min.)

anyway, all the other logs are at 0 bytes and appear to be superseded by a new format (messages is messages.log, auth is auth.log, etc.) but there is no syslog. is the syslog info getting incorporated into other logs?

ozar · 2005-10-24 20:47:21

Do you have it activated under DAEMONS in /etc/rc.conf?

slackhack · 2005-10-24 20:52:11

yes, but i just noticed in the ps ax list that it has -m 0. does that mean it's not logging? -m = interval, the man page says.

sh__ · 2005-10-24 22:27:06

"-m 0" means that syslogd will not print "-- MARK --" lines in the log file, it's just a cosmetic setting.

phrakture · 2005-10-24 22:28:23

slackhack wrote:

anyway, all the other logs are at 0 bytes and appear to be superseded by a new format (messages is messages.log, auth is auth.log, etc.) but there is no syslog. is the syslog info getting incorporated into other logs?

What information are you looking for? With all system loggers, log messages are given a domain (i.e. log this to the "kernel" domain). If you check out /etc/syslog-ng/syslog-ng.conf you can see where each domain is being sent to. If you want, go ahead an change it.

If you look closely, the syslog.log file only contains information from syslog itself. filter f_syslog { program(syslog-ng); };

It might help if we knew what info you were looking for.

slackhack · 2005-10-25 00:49:44

no specific info. i thought i remembered reading that sudo logged there, so i wanted to check it out. when there was no syslog, i started wondering what was going on. except for dmesg, etc. and apache logs i really don't worry about logs too much actually, unless i notice that something seems off. but i definitely don't like things malfunctioning, either.

syslog.conf looks okay. i've stopped and started syslogd a couple times, maybe i should actually try rebooting, :oops: it's been a few weeks.

T-Dawg · 2005-10-25 02:32:37

slackhack wrote:

no specific info. i thought i remembered reading that sudo logged there, so i wanted to check it out.

you can find that in messages.log

sudo grep sudo /var/log/messages.log

pobudz · 2006-08-12 18:14:47

I'm having this same problem, except its the same for every log... everything, kernel, etc... nothing shows any information.

I'm using the default config... syslog-ng is started... what am I missing here?

Arch Linux

#1 2005-10-24 20:18:03

no syslog?

#2 2005-10-24 20:47:21

Re: no syslog?

#3 2005-10-24 20:52:11

Re: no syslog?

#4 2005-10-24 22:27:06

Re: no syslog?

#5 2005-10-24 22:28:23

Re: no syslog?

#6 2005-10-25 00:49:44

Re: no syslog?

#7 2005-10-25 02:32:37

Re: no syslog?

#8 2006-08-12 18:14:47

Re: no syslog?

Board footer