Syslog Trouble.

2007-12-25 11:54:00

Thanks for all the help everyone has emailed me with so far, although I got my

answer from Sun I really appriciate all the help everyone suggested I try.

Original Question (Condensed Version - Original message follows):

I am having trouble with syslog logging to a remote host. All the

configuration files are setup with no problem. I get no errors when trying to

perform this operation, the message just does not show up anywhere.

The Answer:

It has nothing to do with the remote host at all. The problem arrises when

there are more then 20 facilities / 20 open log files. Syslog starts at the

top of the file (/etc/syslog.conf) and reads down. After processing 20 lines

(excluding comments and newlines) it stops, and silently exits, skipping the

remaining lines.

This information can be found in: Bug Reports article 1139854 on the sunsolve

web site.

I had the faclities I was trying to log at the bottom of the file, to test

this I moved the facility to the top of the the file kill -HUP'ed syslogd and

tryed to send info the the remote host, it worked!

There is also a patch to fix this problem: 103738 I have tested this patch

and it does solve the problem. (The patch is for 2.5.1)

Thanks again for everyones help,

--Jason E. Murray

Original Message Follows:

We are having a problem with syslog logging to a remote @loghost. I believe I

have everything setup correctally, as most machines will log to the remote

@loghost without a problem.

There are a couple of our machines that will not however. The syslog.conf file

is setup to log:

local5.debug @loghost

I am testing this with the the /bin/logger binary:

/bin/logger -p local5.info -t TEST Syslog test

It is not working, I have checked all over the machine that I am running this

from and it is not getting logged anywhere on the local or the remote machine.

Both machines are 2.5.1. They are on the same network. Yes, there is a tab

between the local5.debug and the @loghost.

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

 Jason E. Murray EMAIL: jemurray@concentric.net

 UNIX System Administrator http://www.concentric.net/~jem

 Concentric Network Corporation

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Comments

Got something to say?

You must be logged in to post a comment.