Christine Tran wrote: > I'm having IPFilter log via syslog: > > local0.debug ifdef(`LOGHOST', /var/log/ipmon.log, > @loghost) > > I'm also using logadm.conf to rotate ipmon.log. However, the rotation does > not close and re-open with the correct fd to the new file. You will have to > restart system-log to make Solaris do the right thing.
You don't have to 'restart' system-log, a 'refresh' should do the job. Specify that as a post-command to the 'logadm' invocation. (Use the '-a' option.) Or do what the system jobs do and use a post-command to send a SIGHUP directly to the syslog daemon, which is what 'svcadm refresh system-log' does under the covers. Similar to this: % grep adm/messages /etc/logadm.conf /var/adm/messages -C 4 -P 'Sun Aug 9 10:10:00 2009' -a 'kill -HUP `cat /var/run/syslog.pid`' Mike. -- mike.oliver at sun.com > Is there a quick fix > for this? I want to use the structure that's already there, I don't want to > deviate and run ipmon -s <some file> and script something around it, neither > do I want to hack and restart system-log every time I rotate logs. > > What's a quick fix to this? I just want to put an entry in logadm.conf and > make it do the right thing. > > I'm cc'ing the SMF alias, this is also a problem with SMF logs in > /var/svc/logs, IIRC, I think there was a bug filed against SMF for S10, but > I can't seem to find it on bugs. Has this been fixed? Is this a problem > with how syslog works, or how the application has coded its logging > facility? > > > > > ------------------------------------------------------------------------ > > _______________________________________________ > smf-discuss mailing list > smf-discuss at opensolaris.org
