Empty logfiles on 10.4.11 Server after extended uptime

I am running about a dozen Xserves in a production environment with very strict change control. The Xserves are running Tiger Server. Recently while monitoring a server's performance I tailed the SMTP log and found it empty. I then checked the system.log and it too was empty. syslog was running and showed that it has been running for 261 days (same as the overall server uptime). I performed a kill -1 on the syslog process and syslog restarted but still nothing in any of the system logs. I surveyed the rest of my servers and there was one other server with an uptime of 261 days (the next highest uptime was 94 days). This server happened to be a web server. I checked the system logs in /var/log and found the same issue (logs were empty). All of the logs in the other machines were filling up happily. All of the compressed logs were also empty which leads me to believe that the logging stopped at least 10 days ago. Other than this the system seems to be functioning normally although it is sort of hard to determine without logfiles to look at. I rebooted the mail server and it recovered normally and also started logging normally.
I have googled for this issue and haven't found any relevant information except for folks who have misconfigured syslog.
I can always reboot the servers to recover from this but I would prefer not to reboot my servers regularly. Hopefully an uptime of 261 days is not unusual or unexpected.
Anyone have any experience with this issue or recommendations?

Seems as though I have answered my own question. Here is the crux of the issue:
While walking through the process tree I discovered two "tail -f " processes from 2 months ago. These processes were presumably either orphaned or zombified from a very old ssh session. In my excitement I sent them a kill -1 before I investigated where they came from and presto, syslogd started writing to all of its logs. So there you have it. For me a simple ps aux | grep tail solved it.
Good luck with yours.

Similar Messages

  • Audio "crackles" after extended uptime

    Hi all,
    I've had a problem with my iMac (mid-2011 model [gestalt ID of iMac12,2]) basically ever since I got it... I suspect the problem is in software, not hardware, but I can't reproduce it on my MacBook Pro (mid-2010 model) running the same OS and same applications.
    Specifically, the audio begins to "crackle" after extended uptime (typically around 20 days).  This would only be mildly annoying except that after about a day or two of this, coreaudiod begins to take up 100% cpu and I get periodic mini-freezes of the entire system (mouse hang, clock hang, etc.) every time a sound tries to play.  Each freeze takes maybe 2 seconds but it obviously gets really annoying, really quickly.
    A reboot always fixes the problem, but it would be great to avoid having to do this.  Both the iMac and the MBP are running the same OS (10.6.8, build 10K549), so the only thing I can guess is that this is related to a specific kernel extension that is active on the iMac but not on the MBP, since only the iMac has this problem.
    One curiosity is that this seems to be a problem only when outputting via the internal speakers... if I connect headphones, I don't notice the problem (at least not in my limited testing).  Not sure if a different kext handles output to headphones versus internal speakers, but if so, that could again be an indicator of the problem.  (The Sound prefpane in System Preferences certainly knows the difference between headphones and internal speakers...)
    Extensive Googling has led to zero results...
    Does anyone have experience with this issue and/or know of a good solution, besides upgrading to 10.7/10.8?  (For institutional reasons, I prefer not to upgrade at this time, if it can be avoided.)
    Thanks in advance.

    I take back the "curiosity" paragraph... today, the same stuttering/crackling is coming through the headphones, too.  Looks like it's not limited to just the internal speakers.
    This is quite maddening.   I hope that someone might have an answer (besides just rebooting).
    Thanks!

  • Nodemanager does not restart managed server after Linux OS reboot

    Running Linux 2.6.18, Sun JDK 1.6.0_14, and WebLogic 10.3, we have a correctly functioning nodemanager watching a single managed server. If I kill -9 the managed server, the nodemanager fires up a new one immediately. If, however, we reboot the box, the nodemanager will start cleanly and will not start the managed server. It appears to believe the node should remain down and reports its status as UNKNOWN.
    I've seen where this is a known problem on Windows boxes, easily gotten around by supplying the -Xrs parameter to the startup parms for the managed server. (Section 5 of the general nodemanager config doc.) I don't see, however, where there's an equally clean solution for Linux.
    Things I've tried:
    + When I set the server to DEBUG, it shows zero sign of receiving a shutdown signal. It's dumping loads of cluster messages, etc, into the log and then suddenly the log just ends so it's dying via kill -9. If the nodemanager is still running at that time, it might try to restart the managed server and log it somewhere as permanently failed.
    + The nodemanager only logs to INFO level, and logs no evidence of deciding to leave the node down. (DEBUG is an invalid LogLevel, so that's all I've got.)
    + A restart signal sent from our AdminServer (on another Linux box) successfully starts the managed node through the nodemanager. Nothing unusual occurs or is logged.
    Things I'm curious about:
    + Is there some way to see in what state the nodemanager believes the managed server to be?
    + Is there some value in some doc somewhere that might say the server should not be restarted?
    + Is there not a log of NodeManager client actions? I don't see anything in domain.log or AdminServer.log except when the NM is down.
    Thanks,
    Kevin
    ListenPort=5556
    ListenBacklog=50
    SecureListener=true
    AuthenticationEnabled=true
    NativeVersionEnabled=false
    CrashRecoveryEnabled=true
    JavaHome=/appl/java/jre
    StartScriptEnabled=false
    StopScriptEnabled=false
    StartScriptName=startWebLogic.sh
    StopScriptName=
    LogFile=/appl/bea/wlserver_10.3/common/nodemanager/logs/nodemanager.log
    LogLevel=INFO
    LogLimit=0
    LogCount=1

    can you set NativeVersionEnabled to true. We have faced this in windows which was fixed by changing this property. Some notes from that issue:
    Faced this interesting issue in Windows 2008 environment. Managed Servers were started by node manager and it was expected that on a system restart after a crash, the node manager will restore the state of the managed servers to the state it was before the crash. Node Manger was configured to run as a windows service. Hence it started after the server restart. But the individual managed servers were not getting started. Interestingly, for the managed servers started by the node manager there were no <Managed_Server_Name>.lck file in the <Server>/data/NodeManger folder.
    To fix this always set the following properties in the nodemanager.properties on the node maager home directory.
    CrashRecoveryEnabled=true /* This by default is set to false. This needs to be turned for auto restart after crash to work */
    NativeVersionEnabled=true /* This is by default set to true and it should be set as such. If you turn this off on platforms for which weblogic provide native JNI libraries ( e.g. as in Windows 2008) then this wont create the .lck file and hence node manager wont restart the managed server after the crash.
    Note: As per official documentation .lck files are required for weblogic node managers to do auto restart after system crash
    From Official documentation:
    After the system is restarted, Node Manager checks each managed domain specified in the nodemanager.domains file to determine if there are any server instances that were not cleanly shutdown. This is determined by the presence of any lock files which are created by Node Manager when a WebLogic Server process is created. This lock file contains the process identifier for WebLogic Server startup script. If the lock file exists, but the process ID is not running, Node Manager will attempt to automatically restart the server.
    If the process is running, Node Manager performs an additional check to access the management servlet running in the process to verify that the process corresponding to the process ID is a WebLogic Server instance.
    After the system is restarted, Node Manager checks each managed domain specified in the nodemanager.domains file to determine if there are any server instances that were not cleanly shutdown. This is determined by the presence of any lock files which are created by Node Manager when a WebLogic Server process is created. This lock file contains the process identifier for WebLogic Server startup script. If the lock file exists, but the process ID is not running, Node Manager will attempt to automatically restart the server.If the process is running, Node Manager performs an additional check to access the management servlet running in the process to verify that the process corresponding to the process ID is a WebLogic Server instance.
    */

  • Expert advice needed: Why could I not connect to my own server after deletion of SSL certificate?

    Issue: Could not connect to my own server after deletion of SSL certificate despite having SSL disabled
    Hello,
    I admit I am lay user with rudimentary SSL knowledge and I therefore messed up my certificates and I could no longer access my own server (Wikis, WebDav, Device Manager) with Safari. (error: Safari can't connect to server)
    Eventually, I could resolve the problem but I do not understand why there was problem in the first place.
    Maybe someone can explain that to me ?
    OK, here is what I did:
    I created a Certificate Authority because I wanted to use a free SSL Server certificate for our private server.
    (I followed  http://www.techrepublic.com/blog/mac/create-your-own-ssl-ca-with-the-os-x-keycha in/388 )
    Despite several attempts I never got the server to accept the certificate for web services, the certificate was accepted for iCal, Mail and iChat but not for Web services. I tested an older certificate that was created when I set up the server and that that worked for all services incl. Web. So the problem was with my certificate only.
    Out of desperation and lack of concentration I deleted the "original" certificate.
    Now, I soon noticed that I could no longer log in to my server. I solved the problem by restoring the original certificate.
    My question:
    I had SSL disabled in the Server app settings. Why does Safari still look for a proper certicate ? (the server logfile had an entry that a .pem file could not be found which makes sense if the cert has been deleted)
    I would be very grateful for an expert advice.
    Regards,
    Twistan

    Because....
    the server does not have a 'trusted' certificate assigned to it.
    Only the RDP Gateway has the trusted certificate for the external name.
    If you want to remove that error, you have to do one of the following:
    Make sure your domain uses a public top level domaim, and get a public trusted certificate for your server.
    So, something like,
    server.domain.publicdomain.com
    Or,
    Install that certificate on your remote computer so it is trusted.
    Robert Pearman SBS MVP
    itauthority.co.uk |
    Title(Required)
    Facebook |
    Twitter |
    Linked in |
    Google+

  • Delete emails from server after retrieving with IMAP protocol?

    Hi,
    I am using Mail as my email program and have set up my account with IMAP.
    When I use the POP protocol, I get the option to 'Remove copy from server after retrieving message'. When I set up Mail with the IMAP protocol, there is no such an option. The result is that my server inbox is slowly filling up and I manually have to login on my server to delete older messages.
    Is there a setting to automatically remove retrieved messages from my email server using IMAP?
    Thanks for your help.
    Erik

    Dear Thomas,
    Thanks for the clarification! Now I understand the mechanism.
    Still I would like to know if there is a way to automatically remove retrieved messages from the e-mail server. Would it help to automatically move my incoming messages in INBOX to a different mailbox in Mail.app? How would I set this up?
    Thanks for the response!
    Erik

  • Mac OS 8.6 Auto network connect to a server after reboot is not working

    We have multiple old blue and white systems on a network. All but one will automatically connect to the network when rebooted. I have gone into Chooser, Appletalk, put in the server IP address, put in the server password, checked the boxes that say remember Server name and password for next startup. I can connect at that time with no problem. When I reboot, the server does not automatically hook up. I have to go back into Chooser, etc. I created an alias on the desktop, but it still prompts me for a password to connect. I have performed a clean install of the Mac OS 8.6. It still does not connect to the server after reboot (after configuring all the settings again after the clean install). Please help..

    Hi,
    Thank you for posting in Windows Server Forum.
    Can you please create the database manually with below command and verify.
    PS C:\> Set-RDConnectionBrokerHighAvailability –DatabaseConnectionString
     "DRIVER=SQL Server Native Client 11.0;SERVER=<SQL Server
     Name>;Trusted_Connection=Yes;APP=Remote Desktop Services Connection Broker;
    DATABASE=<DB Name>" -DatabaseFilePath "C:\DbFiles\<DbName>.mdf"
     -ClientAccessName "<DNS RR Name>"
    Grant DBO permissions to the service account on the RDS server and try to run your wizard again.
    More information.
    RD Connection Broker High Availability in Windows Server 2012
    http://blogs.msdn.com/b/rds/archive/2012/06/27/rd-connection-broker-high-availability-in-windows-server-2012.aspx
    Hope it helps!
    Thanks.
    Dharmesh Solanki
    TechNet Community Support

  • Can not  start/stop fullfilment server after fresh install

    Can not start/stop fullfilment server after fresh install
    Product: e-business suite (11.5.9)
    Platform: Win XP 5.1 (SP2)
    We have performed a new installation of ebusiness suite in our windows platform.
    Installtion went with out any problem.
    But we can not start/stop the fullfilment server. While trying to start/stop the server we are getting follwing error message:
    c:\oracle11i\prodcomn\admin\scripts\PROD_03274019ih\jtffmctl.cmd start
    script returned:
    C:\oracle11i\prodcomn\admin\scripts\PROD_03274019ih>echo off
    You are running jtffmctl.cmd
    Mon 13/09/2004
    01:46 PM
    "Starting Fulfillment Server for "PROD" on port "9300" ...\n"
    "Error returned while running OUI"
    ERRORCODE = 1 ERRORCODE_END
    .end std out.
    Class not found: oracle.apps.jtf.fm.engine.processor.Processor
    Please let us know how to fix this issue.
    Regards, Kunal

    edit the jtffmctl.cmd and make sure that it point to the correct java path, alse try to use java 1.4.1

  • It's very slow to access file server after installed SP1 of Win7.

    I found it's become very slow to access shared files on file server after installed win7 SP1, (windows6.1-KB976932-X86.exe),  access same file, the win7 without sp1 is fast in 5 secs, but the pc with sp1 need more than 30 secs. And
    I tried to removed the sp1, everything goes fine, access fast as others.
    I don't understand what's the reason and which feature affected it, I believe the sp1 can help Win7 be more safety, but why the performance on it get worse.
    And I didn't find the same question or tips on forum or website, do you really haven't the issue?
    Arnold From Shanghai, China
    Arnold Yu

    Hi Arnold,
    Windows 7 Service pack and any other Windows Updates are released to improve the performance, reliability and security of the system.
    Firstly please run the performance troubleshooter:
    Open the Performance troubleshooter
    http://windows.microsoft.com/en-US/windows7/Open-the-Performance-troubleshooter
    If it doesn't resolve the issue, Put the computer in
    Clean Boot and then check to see if the issue persists.
    If it still persists, please use performance monitor to trace your computer's performance:
    Performance Monitoring Getting Started Guide
    http://technet.microsoft.com/en-us/library/dd744567(v=ws.10).aspx
    Karen Hu
    TechNet Community Support

  • How can I set it to delete messages off my server after they download?

    How can I set it to delete messages off my server after they download?

    IMAP email is server based. The messages stay on the server and just view them remotely with an email client like Thunderbird. If you want to keep a copy on your computer you need to move a copy of the email message to a folder under Local Folders. If you delete the message off the server, it is going to be gone otherwise.
    The delete from the server option is a POP email server. It does not apply with IMAP email.

  • SAP B1 APPLICATION IS RUNNING SLOW IN SERVER AFTER UPGRADE

    Hi,
    The sap application is running slow in server after upgrading it from 9.0 to 9.1 it's taking 5-10 secs to open a document after clicking it and its taking more time in client system.
    what are the steps to be taken so that the application will run without any delay.
    Regards,
    Karthik B

    hi please check bellow thread ,it may help you
    Client Machines Logon to SAP Server is Very Slow
    update the status
    regards
    AKR

  • Adobe reader shows a horizontal empty window in OSX 10.9.3 after uninstalling Acrobat 8. How to get rid of it?

    Adobe reader shows a horizontal empty window in OSX 10.9.3 after uninstalling Acrobat 8. How to get rid of it?

    Macintosh HD > Library > Internet Plug-ins
    Look for these two files.
    AdobePDFViewerNPAPI.plugin
    AdobePDFViewer.plugin
    Right click on those and select “Move To Trash”.
    Restart the computer.

  • I have a new lion server and 4 lion laptops. The laptops loose connection to the shared documents and printers from the server after roughly 1 hour. By disconnecting and re-connecting wireless the connection is regained to shares and printers

    I have a new lion server and 4 lion laptops. The laptops loose connection to the shared documents and printers from the server after roughly 1 hour. By disconnecting and re-connecting wireless the connection is regained to shares and printers. We can still surf the web when it goes down.

    Ok 1st one. The warning restriction message relates to this line in main.cf:
    smtpd_helo_restrictions = permit_sasl_authenticated  permit_mynetworks  check_helo_access hash:/etc/postfix/helo_access  reject_non_fqdn_hostname  reject_invalid_hostname  permit reject_invalid_helo_hostname
    The last reject occurs after the single word "permit" and is ignored.
    However, that's not the problem.
    I'm not exactly sure what's happening, but this might be a clue.
    It would appear that either postfix is not being able to create the socket for private/policy or it's somehow created with the wrong permissions.  You might need to ramp up the debug level to get a better idea.
    You could check if it's being created by "netstat -a | grep private/policy" in terminal.
    My guess is that it's not being created because there is no setup statement in your master.cf file, but I don't understand why postfix would be looking for it if it isn't set up.  Private/policy I think relates to grey listing.  Maybe gives you a hint.

  • How to RENAME the file in UNIX-Appl. server, after READING it?

    Hi Experts,
    Following is my requirement,
    What we are wanting here is the functionality added to this program that once the UNIX file is processed, that it can be closed and then renamed on the Application server with the yyyymmdd extension.  For example, the program reads and processes the My_file.csv file today.  Once it's finished, it then closes the file and renames it as My_file20080610.csv.  By doing this, it will prevent the same file from being run the next day in case the new file is not sent. 
    So, pls. let me know that, How to RENAME is file in the UNIX - Appl. server, after reading it? obviuosly I closes it at the end.
    thanq

    Hi Srinivas,
    You can create a My_file20080610.csv. Write the content from My_file.csv into My_file20080610.csv. Then using DELETE DATASET delete the file My_file.csv.
    Thanks
    Romit

  • Background Jobs are failing in DEV server after SP upgrade

    Hi Everyone,
    Below jobs are being failed in dev server after SP upgrade with error variant does not exist.
    SWWERRE, SWWDHEX, SWWCOND,  SWWCLEAR,SWFSLSDLEX, NON SAP USER UPLOAD
    System Details:
    SAP Version: ECC 6.0
    Database: SQL 2005
    OS: Windows 2003, SR2, 64 - bit.
    Kernel Patch: 221
    SAP_BASIS:19
    SAP_ABA :19
    SAP_APPL : 16
    SAP_AP :17
    SAP_HR : 51
    SAP_BW : 21
    PI_BASIS 2006_1_700 : patch 009
    ST_PI: ST_PI 2005_1_700 : 006
    FINBASIS : 16
    LOSFE: 16
    Can any one have idea on above mentioned jobs.
    Thanks & Regards,
    Vinod

    > Below jobs are being failed in dev server after SP upgrade with error variant does not exist.
    > SWWERRE, SWWDHEX, SWWCOND,  SWWCLEAR,SWFSLSDLEX,
    Those are workflow related jobs.
    > NON SAP USER UPLOAD
    This is a job name and not the program name.
    Markus

  • SMTP error from remote mail server after initial connection:

    Hello folks. I having some serious issues sending email to clients with .mac accounts. I keep on getting the following error. Can someone help? I have replaced email address names with "Blank@...) for obvious reasons.
    This message was created automatically by mail delivery software.
    A message that you sent could not be delivered to one or more of its
    recipients. This is a permanent error. The following address(es) failed:
    [email protected]
    SMTP error from remote mail server after initial connection:
    host smtp-mx1.mac.com [17.148.20.64]: 452 try later:
    retry timeout exceeded
    ------ This is a copy of the message, including all the headers. ------
    Return-path: <[email protected]>
    Received: from ip72-207-229-240.br.br.cox.net ([72.207.229.240] helo=[192.168.0.102])
    by srv3.purenrg.com with esmtp (Exim 4.68)
    (envelope-from <[email protected]>)
    id 1JFeOb-0001FZ-5F
    for [email protected]; Thu, 17 Jan 2008 18:43:41 -0500
    Message-Id: <[email protected]>
    From: "[email protected]" <[email protected]>
    To: Cindy Barnes <[email protected]>
    Content-Type: multipart/alternative; boundary=Apple-Mail-3--1032078955
    Mime-Version: 1.0 (Apple Message framework v915)
    Subject: invoice 520 is overdue
    Date: Thu, 17 Jan 2008 17:43:40 -0600
    X-Mailer: Apple Mail (2.915)
    X-PopBeforeSMTPSenders: [email protected]{
    --Apple-Mail-3--1032078955
    Content-Type: text/plain;
    charset=US-ASCII;
    format=flowed
    Content-Transfer-Encoding: 7bit

    I'm sure someone will give more detail, but it looks like the server blocked your address because it thinks it's a spam source.  If you're not spamming, then it might be someone on the same network spamming, or malware on your computer doing it.  Or it could just be a mistake.  try calling whoever runs your mail server and see if they can give you more information.

Maybe you are looking for

  • Row currency has changed ... error

    I am using jdev 10g, ADF, jsp (not uix). After each action the current row changes somewhere and I don’t know where or why. When trying to get the next set of the records I am getting the error: Row currency has changed since the user interface was

  • What are the limitations of remote API?

    Excuse me, I am new to Oracle BPEL, and going to customize the worklist application using remote API. I read the Sample Worklist Application for learning the remote API. When I learning about task attachment's API, I saw a thread RemoteWorklistServic

  • How to Sort Array of Object

    Hallo. I have an array of objects. Each object has id and name. How can i sort by name or by id?? Thx for all Max

  • Find sys schema for imp database in 9i

    Hi Experts, Based on ORACLE rcommandation, I will take exp/imp to full database to other server ( it is only way based on source DB condition) To avoid duplicated system objects, i run a sql to get a schema list ============================== SQL> se

  • Is there a way to suppress the "dll missing message box" when OraOLEDBpus11.dll is missing?

    Hi, We are working on a .net windows service program. In one code path, we will create an oracle oledb connection to an oracle database using ado.net provider over oledb. We use oracle oledb provider (11g, 64bit) but we found when the path was config