/var/log/messages is empty

Todd Denniston Todd.Denniston at ssa.crane.navy.mil
Mon Apr 20 14:59:29 UTC 2009


Mikkel L. Ellertson wrote, On 04/19/2009 08:53 PM:
> Geoffrey Leach wrote:
>> On 04/19/2009 02:29:38 PM, Joseph L. Casale wrote:
>>>>> logrotate moves /var/log/messages to /var/log/messages-todaysdate 
>>>>> once
>>>>> in a
>>>>> while.
>>>>>
>>>> Thanks, but that's not the problem. I've got several rotated logs
>>> with 
>>>> content, and one without.
>>> I think you may have missed the point: If logrotate swapped it,
>>> and nothing new has been logged, it could be empty.
>>>
>>> # logger Foo
>>> # tail /var/log/messages
>>>
>>> What you get?
>> root at pvr[7]->logger Foo
>> root at pvr[8]->tail /var/log/messages
>> root at pvr[9]->
>>
> It sounds like the log file may have been deleted/recreated without
> rsyslog being restarted. Try running "service rsyslog reload" or
> "service rsyslog restart" and see if that helps. It is possible for
> a process to keep writing to a file it had open, even if the file
> has ben deleter.
> 
> Mikkel
> 

Which fedora?
I have seen a symptom like this before.
suggestion, check to see how many sysloger's you have...
rpm -qa |grep syslog
https://bugzilla.redhat.com/show_bug.cgi?id=441664

Though I think Peter fixed it so they should work together now (at least for F10).

-- 
Todd Denniston
Crane Division, Naval Surface Warfare Center (NSWC Crane)
Harnessing the Power of Technology for the Warfighter




More information about the users mailing list