Solaris 10 logadm

Question

I'm having a problem with log rotation. I have my authentication failures setup to log to /var/log/auth.messages in syslog.conf. Thats all been working well. However,the file was getting large so I decided to configure log roation. In my /etc/logadm.conf I have entered the following.
/var/log/auth.messages -C 5 -s 3m
I then ran logadm and the system appended a 0 to /var/log/auth.messages (/var/log/auth.messages.0) and created a new /var/log/auth.messages file.
So far so good. The problem is that nothing gets written to the new log file, everything still goes to the original messages file which is now called /var/log/auth.messages.0. So nothing is getting written to /var/log/auth.messages. I was only able to get the system to log to the new file by running svcadm refresh system-log. My understanding is that this is supposed to be done automatically when the logadm command is run. If I'm correct, the following line in logadm.conf should be doing this.
/var/log/syslog -C 8 -P 'Tue Jul 15 07:10:00 2008' -a 'kill -HUP `cat /var/run/syslog.pid`'
Anyone have any ideas?

Answer 1

Nope, the /var/log/syslog line you quote tells it to rotate /var/adm/syslog and hup syslogd when it does so.
It has no effect on what happens when your file is rotated.
So your line should be
/var/log/auth.messages -C 5 -s 3m -a 'kill -HUP `cat /var/run/syslog.pid`'