Re: [DNG] Missing syslog: SOLVED
Hi Hendrik, Hendrik Boom wrote (among other things): > On Wed, Jul 28, 2021 at 06:49:22PM +0900, Olaf Meeuwissen wrote: >> Hi Hendrik, >> >> Silly question perhaps, but do you have a system-log-daemon installed? >> >> dpkg-query -W | grep syslog >> >> should tell you. The most likely one to be installed in rsyslog, IIRC. > > Look like I don't! > > april:~# dpkg-query -W | grep syslog > libparse-syslog-perl1.10-2 > april:~# > > Guess it's time to install rsyslog. > >> If you have, is it started at boot time *and* has it been configured to >> actually log anything? For rsyslog, in the default setup, the answer is >> yes for both of these questions. > > And installing it as a package should give me that default set-up. Indeed, it should. >> >> > And in all that time I hadn't noticed. >> >> > >> >> > It is still running ascii, by the way. I'm pretty sure ascii wasn't >> >> > around yet in 2013, back when I was still running Debian. >> >> That seems to imply you migrated from Debian to Devuan. >> When you migrated, was there anything that might have prevented your >> system from keeping a daemon that processes log messages? >> >> >> > So why no system log? >> >> Maybe your Debian setup only had systemd installed, no rsyslog, and >> when you migrated, no system-log-daemon was found to be needed? > > I did not have systemd installed. I migrated in the time of Jessie, > before systemd became hard to avoid. > I'm not sure, but I think I even migrated by upgrading from the > previous Debian release directy to Devuan Jessie. >> >> > And, while I'm asking anyway, why no /var/log/mail* since 2013 either? > >> Does you system have a running SMTP daemon that gets to process any >> mail? > > Yes. Postfix. It's the one that accepted your message just now. Postfix, by default, logs to the system logger which, for a default rsyslog setup, will write log message there. >> Has it been configured to log anything? Does your syslogger >> spit those log messages into /var/log/mail*? > > Since the mail log stopped at the same time as the syslog, maybe it > also needs syslog. > > I just installed rsyslog, and I'm getting syslog entries again. Good! > Do I also need the other related packages like rsyslog-czmq, > rsyslog-elasticsearch, rsyslog-gnutls, rsyslog-gssapi, rsyslog-hiredis, > rsyslog-kafka, rsyslog-mongodb, rsyslog-mysql, rsyslog-pgsql, and > rsyslog-relp? As Ludovic already mentioned, only if you want rsyslog to log some sort of database. If you are happy with logging to files, just rsyslog will suffice. > And the mail log is geting entries as well. And a lot of other logs. Many daemons, but not all, and many tools, but again not all, send their log messages via syslog(), so rsyslog (or some other syslogger) gets to deal with them. > Some logs don't seem to need the logging demon: > alternatives > aptitude > dpkg > mediatomb > messages > pm-powersave > popularity-contest These are written to directly by the corresponding software. These message do not go through rsyslog. However, some may also be sent to rsyslog and end up in the files below (as duplicates). > and some did: > auth > daemon > debug > dmesg > kern.log > mail.log > messages > syslog These are written to by rsyslog in the default setup. Any software that sents it log messages via syslog() may end up logging there dependent on the rsyslog configuration. > Thank you. Glad you found the cause of your problem! -- Olaf Meeuwissen, LPIC-2FSF Associate Member since 2004-01-27 GnuPG key: F84A2DD9/B3C0 2F47 EA19 64F4 9F13 F43E B8A4 A88A F84A 2DD9 Support Free Softwarehttps://my.fsf.org/donate Join the Free Software Foundation https://my.fsf.org/join ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Missing syslog: SOLVED
On Wed, 28 Jul 2021, Hendrik Boom wrote: I just installed rsyslog, and I'm getting syslog entries again. Do I also need the other related packages like rsyslog-czmq, rsyslog-elasticsearch, rsyslog-gnutls, rsyslog-gssapi, rsyslog-hiredis, rsyslog-kafka, rsyslog-mongodb, rsyslog-mysql, rsyslog-pgsql, and rsyslog-relp? No, rsyslog is sufficient. The suggested packages gives you the ability to write log to a database, or receive log from the network. Ludovic signature.asc Description: PGP signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Missing syslog
Indeed, postfix uses the system logging daemon (which is why mail.log was not being updated with no rsyslog). You can customize it in /etc/rsyslog.conf (or /etc/rsyslog.d/postfix.conf). I've got a bit of a custom setup. The default configuration (if I recall correctly) sends ALL mail.* log messages to both syslog and mail.log, which seemed unnecessary (to me). Also mail.log contained ALL mail log messages, including the ones that were sent to mail.warn and mail.err. To me, the less duplication, the better. If you do make changes, be sure to restart the rsyslog service. # First some standard log files. Log by facility. # *.*;auth,authpriv.none;mail.none -/var/log/syslog ... # Logging for the mail system. Split it up so that # it is easy to write scripts to parse these files. # mail.err /var/log/mail.err & stop mail.warn -/var/log/mail.warn & stop mail.* -/var/log/mail.log #mail.info -/var/log/mail.info #mail.warn -/var/log/mail.warn #mail.err /var/log/mail.err Hendrik Boom wrote: > On Wed, Jul 28, 2021 at 12:06:46PM +0200, Antony Stone wrote: >> On Tuesday 27 July 2021 at 18:27:47, Hendrik Boom wrote: >> >>> And, while I'm asking anyway, why no /var/log/mail* since 2013 either? > Problem has been found: no system logging demon. >> /var/log/mail* would be created by sendmail (and perhaps others), but the >> default for Debian (and therefore Devuan) is Exim, which logs to >> /var/log/exim4/* >> >> So, I'm wondering whether either: >> >> a) you were previously using sendmail, which generated the log files you >> see, >> and then changed (perhaps unknowingly) to Exim, which logs somewhere else > I'm using postfix, which it appears uses the system loggin demon for its log. > >> or >> >> b) this disk had content from some previous system which last got used in >> May >> 2013, and then some subsequent installation or upgrade, without wiping the >> disk first, has resulted in the system you now have, which isn't logging to >> those same files? > That could be. Perhaps an upgrade in 2013 removed the logging demon > (which I just now installed again.) > > -- hendrik > >> What are the ownership and permissions on: >> >> /var >> /var/log ? >> >> >> Antony. > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Missing syslog
On Wed, Jul 28, 2021 at 12:06:46PM +0200, Antony Stone wrote: > On Tuesday 27 July 2021 at 18:27:47, Hendrik Boom wrote: > > > And, while I'm asking anyway, why no /var/log/mail* since 2013 either? Problem has been found: no system logging demon. > > /var/log/mail* would be created by sendmail (and perhaps others), but the > default for Debian (and therefore Devuan) is Exim, which logs to > /var/log/exim4/* > > So, I'm wondering whether either: > > a) you were previously using sendmail, which generated the log files you see, > and then changed (perhaps unknowingly) to Exim, which logs somewhere else I'm using postfix, which it appears uses the system loggin demon for its log. > > or > > b) this disk had content from some previous system which last got used in May > 2013, and then some subsequent installation or upgrade, without wiping the > disk first, has resulted in the system you now have, which isn't logging to > those same files? That could be. Perhaps an upgrade in 2013 removed the logging demon (which I just now installed again.) -- hendrik > > What are the ownership and permissions on: > > /var > /var/log ? > > > Antony. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Missing syslog: SOLVED
On Wed, Jul 28, 2021 at 06:49:22PM +0900, Olaf Meeuwissen wrote: > Hi Hendrik, > > Hendrik Boom writes: > > > On Tue, Jul 27, 2021 at 12:50:36PM -0400, tempforever wrote: > >> Question: do you have /var mounted on a separate partition? I > >> encountered some weird behavior when I attempted to do so. That is, > >> there were files opened before the mount command was issued, resulting > >> in some weird things like that. > > > > No. /var is in the root partition, just like / > > and their file system is /dev/mapper/VG1-jessie--root > > This partition is the root partition. > > > > /usr is a separate partition, /dev/VG1/jessie-usr > > Looks like you're using LVM for / and /usr. Okay, no problem. > > > And /boot is also separate, /dev/md2 > > That looks like your third software RAID device. Not a problem either. > > >> Hendrik Boom wrote: > >> > well, by syslog isn't exactly missing, but ... > >> > > >> > Today my server was mysteriously unresponsive; that is, ssh to its IP > >> > address did not work. > >> > > >> > So I went over to it, and found the screen blanl. > >> > I tried directly into its keyboard (and yes, at this point I had checked > >> > that that power was on and the relevant cables were connected. > >> > No luck. > >> > > >> > I finally rebooted it. (A convenience that's easy to do when it's > >> > physically in your living room). > >> > > >> > It rebooted cleanly, recovered its file systems (quite easy 'cause the > >> > ones I use are EXT4, although there is a Reiser filesystem lurking > >> > somewhere too), and requested a login on its console screen. > >> > > >> > And after that, ssh'ing into it worked again. > >> > > >> > Now this has happened before, about a month ago. > >> > > >> > I decided to investigate and started by looking into /var/log/syslog. > >> > > >> > Which was full of entried from May, none from this month. > >> > And yes, it knows the date is Tue Jul 27 12:19:45 EDT 2021. > >> > > >> > I did a ls -l on syslog* > >> > > >> > april:~# ls -l /var/log/syslog* > >> > -rw-r- 1 root adm 734459 May 17 2013 /var/log/syslog > >> > -rw-r- 1 root adm 1197017 May 17 2013 /var/log/syslog.0 > >> > -rw-r- 1 root adm 79876 May 13 2013 /var/log/syslog.1.gz > >> > -rw-r- 1 root adm 127547 May 12 2013 /var/log/syslog.2.gz > >> > -rw-r- 1 root adm 51821 May 10 2013 /var/log/syslog.3.gz > >> > -rw-r- 1 root adm 44679 May 9 2013 /var/log/syslog.4.gz > >> > -rw-r- 1 root adm 46240 May 8 2013 /var/log/syslog.5.gz > >> > -rw-r- 1 root adm 41297 May 7 2013 /var/log/syslog.6.gz > >> > april:~# > > When you say "full of entries from May", I assume you mean May 2013. I mean May. The entries do not mention the year. I presume they are from 2013, since that is consistent with the date on the file. In any case, the entries cannot be current, because then they would be from July. > > >> > It looks like nothing has been written to syslog for the last eight > >> > years! > > Silly question perhaps, but do you have a system-log-daemon installed? > > dpkg-query -W | grep syslog > > should tell you. The most likely one to be installed in rsyslog, IIRC. Look like I don't! april:~# dpkg-query -W | grep syslog libparse-syslog-perl1.10-2 april:~# Guess it's time to install rsyslog. > > If you have, is it started at boot time *and* has it been configured to > actually log anything? For rsyslog, in the default setup, the answer is > yes for both of these questions. And installing it as a package should give me that default set-up. > > >> > And in all that time I hadn't noticed. > >> > > >> > It is still running ascii, by the way. I'm pretty sure ascii wasn't > >> > around yet in 2013, back when I was still running Debian. > > That seems to imply you migrated from Debian to Devuan. > When you migrated, was there anything that might have prevented your > system from keeping a daemon that processes log messages? > > >> > So why no system log? > > Maybe your Debian setup only had systemd installed, no rsyslog, and > when you migrated, no system-log-daemon was found to be needed? I did not have systemd installed. I migrated in the time of Jessie, before systemd became hard to avoid. I'm not sure, but I think I even migrated by upgrading from the previous Debian release directy to Devuan Jessie. > > >> > And, while I'm asking anyway, why no /var/log/mail* since 2013 either? > > Does you system have a running SMTP daemon that gets to process any > mail? Yes. Postfix. It's the one that accepted your message just now. Has it been configured to log anything? Does your syslogger > spit those log messages into /var/log/mail*? Since the mail log stopped at the same time as the syslog, maybe it also needs syslog. I just installed rsyslog, and I'm getting syslog entries again. Do I also need the other related packages like rsyslog-czmq, rsyslog-elasticsearch, rsyslog-gnutls, rsyslog-gssapi, rsyslog-hiredis, rsyslog-kafka
Re: [DNG] Missing syslog
On Tue, Jul 27, 2021 at 06:52:30PM +0100, Simon Hobson wrote: > Hendrik Boom wrote: > > > I did a ls -l on syslog* > > > > april:~# ls -l /var/log/syslog* > > -rw-r- 1 root adm 734459 May 17 2013 /var/log/syslog > > -rw-r- 1 root adm 1197017 May 17 2013 /var/log/syslog.0 > > -rw-r- 1 root adm 79876 May 13 2013 /var/log/syslog.1.gz > > -rw-r- 1 root adm 127547 May 12 2013 /var/log/syslog.2.gz > > -rw-r- 1 root adm 51821 May 10 2013 /var/log/syslog.3.gz > > -rw-r- 1 root adm 44679 May 9 2013 /var/log/syslog.4.gz > > -rw-r- 1 root adm 46240 May 8 2013 /var/log/syslog.5.gz > > -rw-r- 1 root adm 41297 May 7 2013 /var/log/syslog.6.gz > > april:~# > > > > It looks like nothing has been written to syslog for the last eight > > years! > > This may seem a stupid question ... > But you have checked the contents of the files haven't you ? I.e. checked > that they were that old, and don't just have the wrong timestamp due to "some > unknown problem" ? Yes. Each syslog entry is a line of text starting with a date and time in May and is consistent with the file date. The date does not mention a year, but I presume it refers to a date in 2013. In any case, if they were current they would refer to July instead. -- hendrik ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Missing syslog
On Tuesday 27 July 2021 at 18:27:47, Hendrik Boom wrote: > And, while I'm asking anyway, why no /var/log/mail* since 2013 either? /var/log/mail* would be created by sendmail (and perhaps others), but the default for Debian (and therefore Devuan) is Exim, which logs to /var/log/exim4/* So, I'm wondering whether either: a) you were previously using sendmail, which generated the log files you see, and then changed (perhaps unknowingly) to Exim, which logs somewhere else or b) this disk had content from some previous system which last got used in May 2013, and then some subsequent installation or upgrade, without wiping the disk first, has resulted in the system you now have, which isn't logging to those same files? What are the ownership and permissions on: /var /var/log ? Antony. -- A few words to be cautious of between American and English: - momentarily - suspenders - chips - pants - jelly - pavement - vest - pint (and gallon) - pissed Please reply to the list; please *don't* CC me. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Missing syslog
Hi Hendrik, Hendrik Boom writes: > On Tue, Jul 27, 2021 at 12:50:36PM -0400, tempforever wrote: >> Question: do you have /var mounted on a separate partition? I >> encountered some weird behavior when I attempted to do so. That is, >> there were files opened before the mount command was issued, resulting >> in some weird things like that. > > No. /var is in the root partition, just like / > and their file system is /dev/mapper/VG1-jessie--root > This partition is the root partition. > > /usr is a separate partition, /dev/VG1/jessie-usr Looks like you're using LVM for / and /usr. Okay, no problem. > And /boot is also separate, /dev/md2 That looks like your third software RAID device. Not a problem either. >> Hendrik Boom wrote: >> > well, by syslog isn't exactly missing, but ... >> > >> > Today my server was mysteriously unresponsive; that is, ssh to its IP >> > address did not work. >> > >> > So I went over to it, and found the screen blanl. >> > I tried directly into its keyboard (and yes, at this point I had checked >> > that that power was on and the relevant cables were connected. >> > No luck. >> > >> > I finally rebooted it. (A convenience that's easy to do when it's >> > physically in your living room). >> > >> > It rebooted cleanly, recovered its file systems (quite easy 'cause the >> > ones I use are EXT4, although there is a Reiser filesystem lurking >> > somewhere too), and requested a login on its console screen. >> > >> > And after that, ssh'ing into it worked again. >> > >> > Now this has happened before, about a month ago. >> > >> > I decided to investigate and started by looking into /var/log/syslog. >> > >> > Which was full of entried from May, none from this month. >> > And yes, it knows the date is Tue Jul 27 12:19:45 EDT 2021. >> > >> > I did a ls -l on syslog* >> > >> > april:~# ls -l /var/log/syslog* >> > -rw-r- 1 root adm 734459 May 17 2013 /var/log/syslog >> > -rw-r- 1 root adm 1197017 May 17 2013 /var/log/syslog.0 >> > -rw-r- 1 root adm 79876 May 13 2013 /var/log/syslog.1.gz >> > -rw-r- 1 root adm 127547 May 12 2013 /var/log/syslog.2.gz >> > -rw-r- 1 root adm 51821 May 10 2013 /var/log/syslog.3.gz >> > -rw-r- 1 root adm 44679 May 9 2013 /var/log/syslog.4.gz >> > -rw-r- 1 root adm 46240 May 8 2013 /var/log/syslog.5.gz >> > -rw-r- 1 root adm 41297 May 7 2013 /var/log/syslog.6.gz >> > april:~# When you say "full of entries from May", I assume you mean May 2013. >> > It looks like nothing has been written to syslog for the last eight >> > years! Silly question perhaps, but do you have a system-log-daemon installed? dpkg-query -W | grep syslog should tell you. The most likely one to be installed in rsyslog, IIRC. If you have, is it started at boot time *and* has it been configured to actually log anything? For rsyslog, in the default setup, the answer is yes for both of these questions. >> > And in all that time I hadn't noticed. >> > >> > It is still running ascii, by the way. I'm pretty sure ascii wasn't >> > around yet in 2013, back when I was still running Debian. That seems to imply you migrated from Debian to Devuan. When you migrated, was there anything that might have prevented your system from keeping a daemon that processes log messages? >> > So why no system log? Maybe your Debian setup only had systemd installed, no rsyslog, and when you migrated, no system-log-daemon was found to be needed? >> > And, while I'm asking anyway, why no /var/log/mail* since 2013 either? Does you system have a running SMTP daemon that gets to process any mail? Has it been configured to log anything? Does your syslogger spit those log messages into /var/log/mail*? >> > What has changed? >> > What might have changed? Just shooting in the dark ;-) -- Olaf Meeuwissen, LPIC-2FSF Associate Member since 2004-01-27 GnuPG key: F84A2DD9/B3C0 2F47 EA19 64F4 9F13 F43E B8A4 A88A F84A 2DD9 Support Free Softwarehttps://my.fsf.org/donate Join the Free Software Foundation https://my.fsf.org/join ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Missing syslog
Hendrik Boom wrote: > I did a ls -l on syslog* > > april:~# ls -l /var/log/syslog* > -rw-r- 1 root adm 734459 May 17 2013 /var/log/syslog > -rw-r- 1 root adm 1197017 May 17 2013 /var/log/syslog.0 > -rw-r- 1 root adm 79876 May 13 2013 /var/log/syslog.1.gz > -rw-r- 1 root adm 127547 May 12 2013 /var/log/syslog.2.gz > -rw-r- 1 root adm 51821 May 10 2013 /var/log/syslog.3.gz > -rw-r- 1 root adm 44679 May 9 2013 /var/log/syslog.4.gz > -rw-r- 1 root adm 46240 May 8 2013 /var/log/syslog.5.gz > -rw-r- 1 root adm 41297 May 7 2013 /var/log/syslog.6.gz > april:~# > > It looks like nothing has been written to syslog for the last eight > years! This may seem a stupid question ... But you have checked the contents of the files haven't you ? I.e. checked that they were that old, and don't just have the wrong timestamp due to "some unknown problem" ? Simon ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Missing syslog
On Tue, Jul 27, 2021 at 12:50:36PM -0400, tempforever wrote: > Question: do you have /var mounted on a separate partition? I > encountered some weird behavior when I attempted to do so. That is, > there were files opened before the mount command was issued, resulting > in some weird things like that. No. /var is in the root partition, just like / and their file system is /dev/mapper/VG1-jessie--root This partition is the root partition. /usr is a separate partition, /dev/VG1/jessie-usr And /boot is also separate, /dev/md2 -- hendrik > > > Hendrik Boom wrote: > > well, by syslog isn't exactly missing, but ... > > > > Today my server was mysteriously unresponsive; that is, ssh to its IP > > address did not work. > > > > So I went over to it, and found the screen blanl. > > I tried directly into its keyboard (and yes, at this point I had checked > > that that power was on and the relevant cables were connected. > > No luck. > > > > I finally rebooted it. (A convenience that's easy to do when it's > > physically in your living room). > > > > It rebooted cleanly, recovered its file systems (quite easy 'cause the > > ones I use are EXT4, although there is a Reiser filesystem lurking > > somewhere too), and requested a login on its console screen. > > > > And after that, ssh'ing into it worked again. > > > > Now this has happened before, about a month ago. > > > > I decided to investigate and started by looking into /var/log/syslog. > > > > Which was full of entried from May, none from this month. > > And yes, it knows the date is Tue Jul 27 12:19:45 EDT 2021. > > > > I did a ls -l on syslog* > > > > april:~# ls -l /var/log/syslog* > > -rw-r- 1 root adm 734459 May 17 2013 /var/log/syslog > > -rw-r- 1 root adm 1197017 May 17 2013 /var/log/syslog.0 > > -rw-r- 1 root adm 79876 May 13 2013 /var/log/syslog.1.gz > > -rw-r- 1 root adm 127547 May 12 2013 /var/log/syslog.2.gz > > -rw-r- 1 root adm 51821 May 10 2013 /var/log/syslog.3.gz > > -rw-r- 1 root adm 44679 May 9 2013 /var/log/syslog.4.gz > > -rw-r- 1 root adm 46240 May 8 2013 /var/log/syslog.5.gz > > -rw-r- 1 root adm 41297 May 7 2013 /var/log/syslog.6.gz > > april:~# > > > > It looks like nothing has been written to syslog for the last eight > > years! > > > > And in all that time I hadn't noticed. > > > > It is still running ascii, by the way. I'm pretty sure ascii wasn't > > around yet in 2013, back when I was still running Debian. > > > > So why no system log? > > > > And, while I'm asking anyway, why no /var/log/mail* since 2013 either? > > > > What has changed? > > What might have changed? > > > > -- hendrik > > ___ > > Dng mailing list > > Dng@lists.dyne.org > > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Missing syslog
Question: do you have /var mounted on a separate partition? I encountered some weird behavior when I attempted to do so. That is, there were files opened before the mount command was issued, resulting in some weird things like that. Hendrik Boom wrote: > well, by syslog isn't exactly missing, but ... > > Today my server was mysteriously unresponsive; that is, ssh to its IP > address did not work. > > So I went over to it, and found the screen blanl. > I tried directly into its keyboard (and yes, at this point I had checked > that that power was on and the relevant cables were connected. > No luck. > > I finally rebooted it. (A convenience that's easy to do when it's > physically in your living room). > > It rebooted cleanly, recovered its file systems (quite easy 'cause the > ones I use are EXT4, although there is a Reiser filesystem lurking > somewhere too), and requested a login on its console screen. > > And after that, ssh'ing into it worked again. > > Now this has happened before, about a month ago. > > I decided to investigate and started by looking into /var/log/syslog. > > Which was full of entried from May, none from this month. > And yes, it knows the date is Tue Jul 27 12:19:45 EDT 2021. > > I did a ls -l on syslog* > > april:~# ls -l /var/log/syslog* > -rw-r- 1 root adm 734459 May 17 2013 /var/log/syslog > -rw-r- 1 root adm 1197017 May 17 2013 /var/log/syslog.0 > -rw-r- 1 root adm 79876 May 13 2013 /var/log/syslog.1.gz > -rw-r- 1 root adm 127547 May 12 2013 /var/log/syslog.2.gz > -rw-r- 1 root adm 51821 May 10 2013 /var/log/syslog.3.gz > -rw-r- 1 root adm 44679 May 9 2013 /var/log/syslog.4.gz > -rw-r- 1 root adm 46240 May 8 2013 /var/log/syslog.5.gz > -rw-r- 1 root adm 41297 May 7 2013 /var/log/syslog.6.gz > april:~# > > It looks like nothing has been written to syslog for the last eight > years! > > And in all that time I hadn't noticed. > > It is still running ascii, by the way. I'm pretty sure ascii wasn't > around yet in 2013, back when I was still running Debian. > > So why no system log? > > And, while I'm asking anyway, why no /var/log/mail* since 2013 either? > > What has changed? > What might have changed? > > -- hendrik > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] Missing syslog
well, by syslog isn't exactly missing, but ... Today my server was mysteriously unresponsive; that is, ssh to its IP address did not work. So I went over to it, and found the screen blanl. I tried directly into its keyboard (and yes, at this point I had checked that that power was on and the relevant cables were connected. No luck. I finally rebooted it. (A convenience that's easy to do when it's physically in your living room). It rebooted cleanly, recovered its file systems (quite easy 'cause the ones I use are EXT4, although there is a Reiser filesystem lurking somewhere too), and requested a login on its console screen. And after that, ssh'ing into it worked again. Now this has happened before, about a month ago. I decided to investigate and started by looking into /var/log/syslog. Which was full of entried from May, none from this month. And yes, it knows the date is Tue Jul 27 12:19:45 EDT 2021. I did a ls -l on syslog* april:~# ls -l /var/log/syslog* -rw-r- 1 root adm 734459 May 17 2013 /var/log/syslog -rw-r- 1 root adm 1197017 May 17 2013 /var/log/syslog.0 -rw-r- 1 root adm 79876 May 13 2013 /var/log/syslog.1.gz -rw-r- 1 root adm 127547 May 12 2013 /var/log/syslog.2.gz -rw-r- 1 root adm 51821 May 10 2013 /var/log/syslog.3.gz -rw-r- 1 root adm 44679 May 9 2013 /var/log/syslog.4.gz -rw-r- 1 root adm 46240 May 8 2013 /var/log/syslog.5.gz -rw-r- 1 root adm 41297 May 7 2013 /var/log/syslog.6.gz april:~# It looks like nothing has been written to syslog for the last eight years! And in all that time I hadn't noticed. It is still running ascii, by the way. I'm pretty sure ascii wasn't around yet in 2013, back when I was still running Debian. So why no system log? And, while I'm asking anyway, why no /var/log/mail* since 2013 either? What has changed? What might have changed? -- hendrik ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
