Arch Linux

cdwijs

Member

Registered: 2010-04-24

Posts: 309

[solved] New install, /var/log/everything is not present

Hi All,

I have freshly installed arch linux a few days ago. I notice /var/log/everything is not present.

$ ls -l /var/log/
total 336
-rw-r--r-- 1 root ingeborg  28716 Jun 27 12:33 Xorg.0.log
-rw-r--r-- 1 root ingeborg  27633 Jun 26 20:58 Xorg.0.log.old
-rw-r--r-- 1 root ingeborg  28877 Jun 23 10:26 Xorg.1.log
-rw------- 1 root utmp          0 Jun 19 09:54 btmp
drwxr-xr-x 2 root root       4096 Jun 16 15:02 cups
-rw------- 1 root root      32384 Jun 27 09:21 faillog
drwxr-xr-x 3 root root       4096 Jun 19 09:54 journal
-rw-r--r-- 1 root root     295504 Jun 27 09:21 lastlog
drwxr-xr-x 2 root root       4096 May 31 20:40 old
-rw-r--r-- 1 root root      93310 Jun 27 09:56 pacman.log
-rw-r--r-- 1 root root       6956 Jun 26 07:19 pm-powersave.log
drwxr-xr-x 3 root root       4096 Jun 26 20:58 samba
-rw-rw-r-- 1 root utmp      61824 Jun 27 09:52 wtmp

My first idea was to install syslog-ng, but the wiki page explains that systemd already should do this:
"Note: After upgrading to systemd, syslog-ng is unnecessary for most users and can be uninstalled, since the systemd journal provides this functionality."
https://wiki.archlinux.org/index.php/Syslog-ng

What is the best course of action here?
Regards,
Cedric

Last edited by cdwijs (2013-06-27 11:18:56)

hcjl

Member

From: berlin

Registered: 2007-06-29

Posts: 330

Re: [solved] New install, /var/log/everything is not present

if you want to have the sylslog-ng logs, i.e. auth.log, everything.log, ..., then you have to install it.

Trilby

Inspector Parrot

Registered: 2011-11-29

Posts: 30,456

Website

Re: [solved] New install, /var/log/everything is not present

I don't understand - if you specifically want syslog-ng, you need to install it.  If you want to see systemd's journal, use journalctl.

---

"UNIX is simple and coherent" - Dennis Ritchie; "GNU's Not Unix" - Richard Stallman

cdwijs

Member

Registered: 2010-04-24

Posts: 309

Re: [solved] New install, /var/log/everything is not present

I don't understand - if you specifically want syslog-ng, you need to install it.  If you want to see systemd's journal, use journalctl.

I have installed and enabled syslog-ng. Now /var/log/ looks like I'm used to. Thanks for the fast reply!

# pacman -S syslog-ng
# systemctl start syslog-ng
# ls -l /var/log/
total 672
-rw-r--r-- 1 root ingeborg  28716 Jun 27 12:33 Xorg.0.log
-rw-r--r-- 1 root ingeborg  27633 Jun 26 20:58 Xorg.0.log.old
-rw-r--r-- 1 root ingeborg  28877 Jun 23 10:26 Xorg.1.log
-rw-r----- 1 root log         580 Jun 27 13:20 auth.log
-rw------- 1 root utmp          0 Jun 19 09:54 btmp
drwxr-xr-x 2 root root       4096 Jun 16 15:02 cups
-rw-r----- 1 root log        5200 Jun 27 13:20 daemon.log
-rw-r----- 1 root log        1925 Jun 27 13:20 errors.log
-rw-r----- 1 root log      114528 Jun 27 13:20 everything.log
-rw------- 1 root root      32384 Jun 27 09:21 faillog
drwxr-xr-x 3 root root       4096 Jun 19 09:54 journal
-rw-r----- 1 root log      109138 Jun 27 13:20 kernel.log
-rw-r--r-- 1 root root     295504 Jun 27 09:21 lastlog
-rw-r----- 1 root log       83531 Jun 27 13:20 messages.log
drwxr-xr-x 2 root root       4096 May 31 20:40 old
-rw-r--r-- 1 root root      93484 Jun 27 13:19 pacman.log
-rw-r--r-- 1 root root       6956 Jun 26 07:19 pm-powersave.log
drwxr-xr-x 3 root root       4096 Jun 26 20:58 samba
-rw-r----- 1 root log          76 Jun 27 13:20 syslog.log
-rw-rw-r-- 1 root utmp      62208 Jun 27 13:19 wtmp
# systemctl enable syslog-ng
ln -s '/usr/lib/systemd/system/syslog-ng.service' '/etc/systemd/system/syslog.service'
ln -s '/usr/lib/systemd/system/syslog-ng.service' '/etc/systemd/system/multi-user.target.wants/syslog-ng.service'