> >> -----Ursprüngliche Nachricht----- > >> Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Im > >> Auftrag von Hugh Brown > >> Gesendet: Mittwoch, 23. Juli 2008 19:27 > >> An: Red Hat Enterprise Linux 5 (Tikanga) discussion mailing-list > >> Betreff: Re: [rhelv5-list] syslog broken? > >> > >> Schmidt, Florian wrote: > >>> Hi redhat-guys, > >>> > >>> On one of my RHEL5-boxes there is no logging anymore via syslog. > >>> > >>> I do not have a lot of experience with syslog, so I don't really know > >>> what to look for. > >>> > >>> Restarting syslog does not help. > >>> In /var/log/messages.1 there is the last message from 17th of July > >>> before the box got shut down. Seems that after this event syslog didn't > >>> log anymore. > >>> > >>> File permissions are same as on the other boxes (600 root:root). > >>> > >>> Can anyone give me hints, what to check and/or how to make it work > >>> again? > >>> > >>> Thanks a lot. > >>> Florian > >> > >> I'd make sure /var/log is writable and that you don't have disk > >> corruption. syslog is configured by /etc/syslog.conf > > > > Hi Hugh, > > > > drwxr-xr-x 13 root root 4096 Jul 20 04:02 log > > > > Other processes, which have their own log-file are logging just fine to > > their > corresponding files at /var/log. So the disk should be ok. > > > > > > > >> The line that sends info to /var/log/messages is > >> > >> *.info;mail.none;news.none;authpriv.none;cron.none > >> /var/log/messages > > > > /etc/syslog.conf contains this line. I scp'ed the config-file to the other > > machine, so > it should be ok. > > > >> I'd make sure that isn't commented out. I'd also make sure that after > >> you start syslog that it is still running (use ps to verify that klogd > >> and syslogd are running). > > > > root 8059 1 0 19:06 ? 00:00:00 syslogd -m 0 > > root 8062 1 0 19:06 ? 00:00:00 klogd -x > > > > Both are running. I do not know, what parameters that are, but as they are > > the > same on the other machine I do not think that they are causing the problem. > > > > I noticed the failure while enabling remote logging to another server. Even > > that > does not work. So maybe the error is somewhere deeper in the system? > > > > Would it help to reinstall syslog-package? Does the sysklogd-rpm contain > > both > dameons (syslog and klogd)? > > > > > > Thanks for your time > > Florian > > > >> Hugh > > What did you alter in order to set up remote logging? > > Do you have SELinux enabled?
#sestatus SELinux status: enabled SELinuxfs mount: /selinux Current mode: permissive Mode from config file: permissive Policy version: 21 Policy from config file: targeted on both machines Strange is that I configured it as disabled via the pseude-window-tool "setup". There both machines show [*]Disabled O_o And to configure remote-logging on the working machine I only added on line with "*.* @host" to /etc/syslog.conf. > Hugh _______________________________________________ rhelv5-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/rhelv5-list
