[SWLUG] Where have all the syslogs gone?

[Terry John]

Thanks for the replies. I've guessed it might have something to do with
the order of mounting the fielsystems but it's a little difficult to
reboot the server. Later perhaps.

Restarting syslog seems to have fixed it. Here are the before & after
lsof's

lsof | head -1;lsof | grep log
COMMAND     PID     USER   FD      TYPE             DEVICE      SIZE
NODE NAME
syslogd    3348     root  cwd       DIR              105,2      4096
2 /
syslogd    3348     root  rtd       DIR              105,2      4096
2 /
syslogd    3348     root  txt       REG              105,2     37992
32841 /sbin/syslogd
syslogd    3348     root  mem       REG              105,2    105080
196868 /lib64/ld-2.3.4.so
syslogd    3348     root  mem       REG              105,2   1493409
196869 /lib64/tls/libc-2.3.4.so
syslogd    3348     root  mem       REG              105,2     56902
196638 /lib64/libnss_files-2.3.4.so
syslogd    3348     root    0u     unix 0x000001003cf02680
7508 /dev/log

lsof | head -1;lsof | grep syslog
COMMAND     PID     USER   FD      TYPE             DEVICE      SIZE
NODE NAME
syslogd   19115     root  cwd       DIR              105,2      4096
2 /
syslogd   19115     root  rtd       DIR              105,2      4096
2 /
syslogd   19115     root  txt       REG              105,2     37992
32841 /sbin/syslogd
syslogd   19115     root  mem       REG              105,2    105080
196868 /lib64/ld-2.3.4.so
syslogd   19115     root  mem       REG              105,2   1493409
196869 /lib64/tls/libc-2.3.4.so
syslogd   19115     root  mem       REG              105,2     56902
196638 /lib64/libnss_files-2.3.4.so
syslogd   19115     root    0u     unix 0x000001003b272380
227406 /dev/log
syslogd   19115     root    1w      REG              253,9        45
60 /var/log/messages
syslogd   19115     root    2w      REG              253,9         0
41 /var/log/secure
syslogd   19115     root    3w      REG              253,9         0
55 /var/log/maillog
syslogd   19115     root    4w      REG              253,9         0
22 /var/log/cron
syslogd   19115     root    5w      REG              253,9         0
34 /var/log/spooler
syslogd   19115     root    6w      REG              253,9         0
65 /var/log/boot.log
syslogd   19115     root    7w      REG              253,9         0
32773 /var/log/news/news.crit
syslogd   19115     root    8w      REG              253,9         0
32772 /var/log/news/news.err
syslogd   19115     root    9w      REG              253,9         0
32771 /var/log/news/news.notice

http://www.bbc.co.uk/
This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically stated.
If you have received it in error, please delete it from your system.
Do not use, copy or disclose the information in any way nor act in reliance on it and notify the sender immediately.
Please note that the BBC monitors e-mails sent or received.
Further communication will signify your consent to this.
					
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.lug.org.uk/pipermail/swlug/attachments/20081001/7107bb95/attachment.html>