SUMMARY: Runaway Syslogd

2007-12-24 21:34:00

Earlier (before the holidays), I said:

> I am seeing hundreds of thousands of duplicate entries in
> my syslog logs. Killing the daemon, null-ing the file, and
> restarting it
> only helps until the next message arrives, at which time the
> syslog file again begins filling up; within an hour or two, it's
> consumed all available space in the logging filesystem.

Thanks to:

Sal Serafino serafino at cshl.edu
Jonathan Hays jhays at jtan.com
Fletcher, Joe joe.fletcher at Metapack.com
Justin Stringfellow Justin.Stringfellow at Sun.COM

This would appear to be pilot error. Restoring a default Solaris 8-
distributed syslog.conf file resolved the problem. Even backing
out the latest syslog patch 110945-04 didn't resolve it.

FWIW, I'd swear the now-suspect syslog.conf file *was* working for
several months before this episode. When time permits, I'll go into
old backup tapes and find it from before this started and see whether
it was recently changed.
--
Tim Evans | 5 Chestnut Court
tkevans at tkevans.com | Owings Mills, MD 21117
http://www.tkevans.com/tkevans.html | (443) 394-3864

Comments

Got something to say?

You must be logged in to post a comment.