Re: /var/log/messages is empty

[Todd Denniston <Todd Denniston ssa crane navy mil>]

Mikkel L. Ellertson wrote, On 04/19/2009 08:53 PM:
> Geoffrey Leach wrote:
> > On 04/19/2009 02:29:38 PM, Joseph L. Casale wrote:
> > > > > logrotate moves /var/log/messages to /var/log/messages-todaysdate 
> > > > > once
> > > > > in a
> > > > > while.
> > > > Thanks, but that's not the problem. I've got several rotated logs
> > > with 
> > > > content, and one without.
> > > I think you may have missed the point: If logrotate swapped it,
> > > and nothing new has been logged, it could be empty.
> > >
> > > # logger Foo
> > > # tail /var/log/messages
> > >
> > > What you get?
> > root pvr[7]->logger Foo
> > root pvr[8]->tail /var/log/messages
> > root pvr[9]->
> It sounds like the log file may have been deleted/recreated without
> rsyslog being restarted. Try running "service rsyslog reload" or
> "service rsyslog restart" and see if that helps. It is possible for
> a process to keep writing to a file it had open, even if the file
> has ben deleter.
>
> Mikkel

Which fedora?
I have seen a symptom like this before.
suggestion, check to see how many sysloger's you have...
rpm -qa |grep syslog
https://bugzilla.redhat.com/show_bug.cgi?id=441664

Though I think Peter fixed it so they should work together now (at least for F10).

--
Todd Denniston
Crane Division, Naval Surface Warfare Center (NSWC Crane)
Harnessing the Power of Technology for the Warfighter