/var/dam/messages empty

I have solaris 10 (10/09) server.
My /var/log/messages file is empty. I know that syslod is up. I have run /usr/sbin/syslogd -d and got the following output:
main(1): Started at time Thu May 13 12:32:17 2010
hnc_init(1): hostname cache configured 2037 entry ttl:1200
getnets(1): found 1 addresses, they are: 0.0.0.0.2.2
amiloghost(1): testing 129.237.3.241.2.2
cfline(1): (*.err;kern.notice;auth.notice /dev/console)
logerror(1): syslogd: line 12: unknown priority name "notice /dev/console"
logerror_to_console(1): syslogd: line 12: unknown priority name "notice /dev/console"
cfline(1): (*.alert root)
logerror(1): syslogd: line 13: unknown priority name "alert root"
logerror_to_console(1): syslogd: line 13: unknown priority name "alert root"
cfline(1): (*.emerg *)
logerror(1): syslogd: line 14: unknown priority name "emerg *"
logerror_to_console(1): syslogd: line 14: unknown priority name "emerg *"
cfline(1): (*.debug /var/adm/messages)
logerror(1): syslogd: line 16: unknown priority name "debug /var/adm/messages"
logerror_to_console(1): syslogd: line 16: unknown priority name "debug /var/adm/messages"
syslogd: version 1.105
Started: Thu May 13 12:32:17 2010
Input message count: system 0, network 0
# Outputs: 0
------------------------ priority = [file, facility] ------------------------
0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 2 2 2 2 2
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4
Facilities:
[00] kern: 0
[01] user: 8
[02] mail: 16
[03] daemon: 24
[04] auth: 32
[05] security: 32
[06] mark: 192
[07] syslog: 40
[08] lpr: 48
[09] news: 56
[10] uucp: 64
[11] audit: 104
[12] cron: 120
[13] local0: 128
[14] local1: 136
[15] local2: 144
[16] local3: 152
[17] local4: 160
[18] local5: 168
[19] local6: 176
[20] local7: 184
Priorities:
[00] panic: 0
[01] emerg: 0
[02] alert: 1
[03] crit: 2
[04] err: 3
[05] error: 3
[06] warn: 4
[07] warning: 4
[08] notice: 5
[09] info: 6
[10] debug: 7
[11] none: 16
Per File Statistics
File Tot Dups Nofwd Errs
logmsg(2): msg dispatcher started
sys_poll(3): sys_thread started
init(1): accepting messages from local system
hostname_lookup(5): hostname_lookup started
set_udp_buffer(1): allocate 262144 for fd 4
init(1): accepting messages from remote
init(1): syslogd: started
main(1): off & running....
net_poll(6): net_thread started
^Cmain(1): going down on signal 2
logerror(1): syslogd: going down on signal 2
delete_doorfiles(1): revoked door: DoorFd=6
The same /etc/syslog.conf file didn't create any problems on another Solaris 10 server (5/08). /var/adm/messages* files are produced and when running syslogd -d I have below messages:
main(1): Started at time Thu May 13 12:40:12 2010
hnc_init(1): hostname cache configured 2037 entry ttl:1200
getnets(1): found 1 addresses, they are: 0.0.0.0.2.2
amiloghost(1): testing 129.237.3.80.2.2
conf_init(1): I am loghost
cfline(1): (*.err;kern.notice;auth.notice /dev/console)
cfline(1): (*.alert root)
cfline(1): (*.emerg *)
cfline(1): (*.debug /var/adm/messages)
syslogd: version 1.104
Started: Thu May 13 12:40:12 2010
Input message count: system 0, network 0
# Outputs: 4
------------------------ priority = [file, facility] ------------------------
0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 2 2 2 2 2
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4
5 3 3 3 5 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 X CONSOLE: /dev/console
1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 X USERS: root
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 X WALL:
7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 X FILE: /var/adm/messages
Facilities:
[00] kern: 0
[01] user: 8
[02] mail: 16
[03] daemon: 24
[04] auth: 32
[05] security: 32
[06] mark: 192
[07] syslog: 40
[08] lpr: 48
[09] news: 56
[10] uucp: 64
[11] audit: 104
[12] cron: 120
[13] local0: 128
[14] local1: 136
[15] local2: 144
[16] local3: 152
[17] local4: 160
[18] local5: 168
[19] local6: 176
[20] local7: 184
Priorities:
[00] panic: 0
[01] emerg: 0
[02] alert: 1
[03] crit: 2
[04] err: 3
[05] error: 3
[06] warn: 4
[07] warning: 4
[08] notice: 5
[09] info: 6
[10] debug: 7
[11] none: 16
Per File Statistics
File Tot Dups Nofwd Errs
/dev/console 0 0 0 0
root 0 0 0 0
WALL 0 0 0 0
/var/adm/messages 0 0 0 0
logmsg(6): msg dispatcher started
writemsg(5): Logging msg 'May 13 12:40:12 sudo: [ID 702911 local2.notice] sbusse : TTY=pts/1 ; PWD=/var/adm ; USER=root ; COMMAND=/usr/sbin/syslogd -d' to FILE /var/adm/messages
sys_poll(7): sys_thread started
init(1): accepting messages from local system
hostname_lookup(9): hostname_lookup started
set_udp_buffer(1): allocate 262144 for fd 4
init(1): accepting messages from remote
net_poll(10): net_thread started
init(1): syslogd: started
main(1): off & running....
^Cmain(1): going down on signal 2
logerror(1): syslogd: going down on signal 2
writemsg(2): Logging msg 'syslogd: going down on signal 2' to CONSOLE /dev/console
writemsg(5): Logging msg 'syslogd: going down on signal 2' to FILE /var/adm/messages
delete_doorfiles(1): revoked door: DoorFd=8
Please help. I need /var/adm/messages back. They existed to some point of time.
Many thanks in advance.

Sorry, it should be: /var/adm/messages not /var/dam/messages!
Edited by: kuna_new on May 14, 2010 10:59 AM
Resolved.
Edited by: kuna_new on May 18, 2010 1:57 PM

Similar Messages

/var/adm/messages file empty

Do not know the reason y messages file is empty already restarted the syslog daemon but still its showing empty .
xxxxxxx# more /var/adm/messages
xxxxxx#
# ps -efo zone,pid,ppid,time,comm | grep syslog | grep global
global 11861 1 00:10 /usr/sbin/syslogd
svcs /system/system-log
STATE STIME FMRI
online Sep_10 svc:/system/system-log:default

HI
What happens if you type in :
logger TEST
Does it write it out to the file.
Have you checked your /etc/syslog.conf file.
Make sure it has tabs and not spaces between eg:
*.debug /var/adm/messages

/var/adm/messages error

Hi All,
New to solaris
I am getting the following error in the solaris 5.9 /var/adm/messages file.
Mar 15 13:33:39 dxb01-sol-tfs in.routed[135]: [ID 798604 daemon.error] empty response from 10.1.251.4
Is this any telnet related error or anything serious? Please advise
Any help appreciated
Rgds
Najmal

The first thing that you have to do is to snoop
10.1.251.4 to see the traffic between localhost and
that IP Address.Hi,
Thanks veru much for the response.
I have tried snoop and it gives the following message. What does this mean? Please help
10.1.251.4 -> 10.1.255.255 RIP R (0 destinations)
Rgds

Email notification of warning messages generated in /var/adm/messages

I�m using �mdmonitord� to periodically check status of my disks in RAID 1 (using Solaris Volume Management) If/when problem occurs the errors/warnings will be logged to[b] /var/adm/messages file. What do I need to configure/enable to monitor /var/adm/messages for particual WARNING messages and to notify me via email.
Similar utility on LINUX is Logwatch: http://www2.logwatch.org:81/index.html

Check /etc/init.d/dtcp , i guess it would be copyrighted to fujitsu-siemens if its the fujitsu dtcp. You can also9 do a pkginfo -l SMAWdtcp, which seems to be the name of the fujitsu package. Hmm, odd name for a Fujitsu package.
Actually i found the following Fujitsu bug:
A0559315 Fix flood of messages like dml_send DB_PS_Udp_Con_Remove_List failed
- caused by trying to send the message to a node that is down.
.. which seems rather familiar.
Its fixed with fujitsu patch 901199-08
Other Fujitsu DTCP patches are
901191-08 and 901244-01
Note that to get Fujitsu patches you need a special account, once you have an account you can download them from http://patches.ts.fujitsu.com/

ERROR messages in /var/log/messages

Hi,
I encountered a error messages in /var/log/messages please find below
Dec 9 04:03:08 drs syslogd 1.4.1: restart (remote reception).
Dec 9 04:03:18 drs logger: Could not access /etc/oracle/scls_scr/drs/root/crsstart.
Dec 9 04:03:18 drs logger: Oracle Cluster Ready Services disabled by corrupt install
Dec 9 04:03:18 drs logger: Could not access /etc/oracle/scls_scr/drs/root/crsstart.
Dec 9 04:03:18 drs logger: Oracle Cluster Ready Services disabled by corrupt install
Dec 9 04:03:18 drs logger: Could not access /etc/oracle/scls_scr/drs/root/crsstart.
Dec 9 04:03:18 drs logger: Oracle Cluster Ready Services disabled by corrupt install
Dec 9 04:03:18 drs logger: Could not access /etc/oracle/scls_scr/drs/root/crsstart.
Dec 9 04:03:18 drs init: Id "h1" respawning too fast: disabled for 5 minutes
Dec 9 04:08:19 drs logger: Oracle Cluster Ready Services disabled by corrupt install
Dec 9 04:08:19 drs logger: Could not access /etc/oracle/scls_scr/drs/root/crsstart.
Dec 9 04:08:19 drs logger: Oracle Cluster Ready Services disabled by corrupt install
Dec 9 04:08:19 drs logger: Could not access /etc/oracle/scls_scr/drs/root/crsstart.
Dec 9 04:08:19 drs logger: Oracle Cluster Ready Services disabled by corrupt install
Dec 9 04:08:19 drs logger: Could not access /etc/oracle/scls_scr/drs/root/crsstart.
Dec 9 04:08:19 drs logger: Oracle Cluster Ready Services disabled by corrupt install
Dec 9 04:08:19 drs logger: Could not access /etc/oracle/scls_scr/drs/root/crsstart.
Dec 9 04:08:19 drs logger: Oracle Cluster Ready Services disabled by corrupt install
Dec 9 04:08:19 drs logger: Could not access /etc/oracle/scls_scr/drs/root/crsstart.
Dec 9 04:08:19 drs logger: Oracle Cluster Ready Services disabled by corrupt install
Dec 9 04:08:19 drs logger: Could not access /etc/oracle/scls_scr/drs/root/crsstart.
Dec 9 04:08:19 drs logger: Oracle Cluster Ready Services disabled by corrupt install
Dec 9 04:08:19 drs logger: Could not access /etc/oracle/scls_scr/drs/root/crsstart.
Dec 9 04:08:19 drs logger: Oracle Cluster Ready Services disabled by corrupt install
Dec 9 04:08:19 drs logger: Could not access /etc/oracle/scls_scr/drs/root/crsstart.
Dec 9 04:08:19 drs logger: Oracle Cluster Ready Services disabled by corrupt install
Dec 9 04:08:19 drs logger: Could not access /etc/oracle/scls_scr/drs/root/crsstart.
Dec 9 04:08:19 drs logger: Oracle Cluster Ready Services disabled by corrupt install
Dec 9 04:08:19 drs logger: Could not access /etc/oracle/scls_scr/drs/root/crsstart.
Dec 9 04:08:19 drs init: Id "h1" respawning too fast: disabled for 5 minutes
Dec 9 04:10:46 drs rpc.mountd: authenticated unmount request from 10.3.141.26:651 for /opt/backup_log/srv (/opt/backup_log)
Dec 9 04:10:47 drs rpc.mountd: authenticated mount request from 10.3.141.26:657 for /opt/backup_log/websrv (/opt/backup_log)
Dec 9 04:10:47 drs rpc.mountd: authenticated unmount request from 10.3.141.26:672 for /opt/backup_log/websrv (/opt/backup_log)
Dec 9 04:10:47 drs rpc.mountd: authenticated mount request from 10.3.141.26:677 for /opt/backup_log/ws (/opt/backup_log)
Dec 9 04:12:01 drs rpc.mountd: authenticated unmount request from 10.3.141.26:849 for /opt/backup_log/ws (/opt/backup_log)
Dec 9 04:13:20 drs logger: Oracle Cluster Ready Services disabled by corrupt install
and database (oracle 10g) is running fine, but i cant figure out what could be the problem, can anyone just help me out on this.
Jafar

Hi,
#h1:35:respawn:/etc/init.d/init.cssd run >/dev/null 2>&1 </dev/null
by commenting above line in initttab file would stop messaging, is this would have any adverse affect on the database. As its a production server, so i am really taking time to resolve it. Your suggestions are welcome. If there is no harm in commenting the above line then i would go forward to comment that line.
Thanks
Jafar>

APEX 4.0.2 Project Gantt Chart - Error Code: 2002 Message: Empty input

Hi
I have created a brand new page containing a Project Gantt Chart region. The Gantt chart is designed to track the progress of a job over time. The page has one chart series containing the following SQL.
SELECT null LINK,
stage NAME,
rownum ID,
null PARENT_ID,
trunc(start_date) ACTUAL_START,
trunc(completion_date) ACTUAL_END,
decode(completion_date, null, 0, 100) PROGRESS
FROM tracking
WHERE job_reference = '889343'
This SQL statement returns values from SQL Developer and from the SQL Workshop > SQL Commands from within APEX itself.
The problem is that when I run the page the following error displays inside the region
Category: 2000
Error code: 2002
Message: Empty input
Environment Information
Application Express 4.0.2.00.07. - Clean installation not upgraded from APEX 3
Using Firefox 3.6.15
Issue identical in IE
DB version - Oracle Database 11g Release 11.2.0.1.0 - 64bit Production
I'm really stuck so I hope someone can help me out. I really would appreciate it.
Thanks
Kylie

Debug mode doesn't appear to have picked anything up that looks out of the ordinary to me or raises any alarm bells.
This is the XML with a reduced number of records returned.
<anygantt>
−
<settings>
−
<title align="Center" position="Top">
<text>Resources Gantt</text>
−
<font_style>
<font face="Tahoma" size="2" color="0x000000"/>
</font_style>
</title>
<outer_margin left="0" top="0" right="0" bottom="0"/>
−
<background>
<fill type="Solid" color="0xffffff" opacity="0"/>
<border enabled="false"/>
<corners type="Square"/>
</background>
<navigation enabled="true"/>
−
<locale>
−
<date_time_format week_starts_from_monday="True">
−
<months>
−
<names>
January,February,March,April,May,June,July,August,September,October,November,December
</names>
<short_names>Jan,Feb,Mar,Apr,May,Jun,Jul,Aug,Sep,Oct,Nov,Dec</short_names>
</months>
−
<week_days>
−
<names>
Sunday,Monday,Tuesday,Wednesday,Thursday,Friday,Saturday
</names>
<short_names>Sun,Mon,Tue,Wed,Thu,Fri,Sat</short_names>
</week_days>
−
<format>
<full>%yyyy.%MM.%dd.%HH.%mm.%ss</full>
<date>%yyyy.%MM.%dd</date>
<time>%HH.%mm.%ss</time>
</format>
</date_time_format>
</locale>
</settings>
−
<datagrid enabled="true">
−
<columns>
−
<column width="40" cell_align="Center">
−
<header>
<text>ID</text>
</header>
<format>{%ID}</format>
</column>
−
<column attribute_name="Name" width="180" cell_align="Center">
−
<header>
<text>Name</text>
</header>
<format>{%Name}</format>
</column>
−
<column attribute_name="ActualStart" width="80" cell_align="Center">
−
<header>
<text>Start Date</text>
</header>
<format>{%ActualStart}{dateTimeFormat:%dd-%MMM-%yyyy}</format>
</column>
−
<column attribute_name="ActualEnd" width="80" cell_align="Center">
−
<header>
<text>End Date</text>
</header>
<format>{%ActualEnd}{dateTimeFormat:%dd-%MMM-%yyyy}</format>
</column>
</columns>
</datagrid>
−
<timeline>
<plot line_height="30" item_height="15" item_padding="5"/>
</timeline>
−
<styles>
−
<period_styles>
−
<period_style name="defaultStyle">
−
<tooltip enabled="true">
−
<text>
Task: {%Name}
Start Date: {%ActualStart}{dateTimeFormat:%dd-%MMM-%yyyy}
End Date: {%ActualEnd}{dateTimeFormat:%dd-%MMM-%yyyy}
Complete: {%Complete}%
</text>
<font color="Black"/>
</tooltip>
−
<bar_style>
−
<middle shape="Full">
<fill enabled="true" type="Solid" opacity="0.8" color="0x1D8BD1"/>
<border enabled="true" type="Solid" color="Black"/>
</middle>
−
<states>
−
<hover>
−
<middle>
<border enabled="true" type="Solid" color="Red"/>
</middle>
</hover>
</states>
−
<start>
−
<marker type="Rhomb">
<fill enabled="true" type="Solid" opacity="0.8" color="0x1D8BD1"/>
<border enabled="true" type="Solid" color="Black"/>
</marker>
</start>
−
<end>
−
<marker type="Rhomb">
<fill enabled="true" type="Solid" opacity="0.8" color="0x1D8BD1"/>
<border enabled="true" type="Solid" color="Black"/>
</marker>
</end>
</bar_style>
</period_style>
</period_styles>
−
<task_styles>
−
<task_style name="defaultStyle">
−
<tooltip enabled="true">
−
<text>
Task: {%Name}
Start Date: {%ActualStart}{dateTimeFormat:%dd-%MMM-%yyyy}
End Date: {%ActualEnd}{dateTimeFormat:%dd-%MMM-%yyyy}
Complete: {%Complete}%
</text>
<font color="Black"/>
</tooltip>
−
<row_datagrid>
−
<tooltip enabled="true">
−
<text>
Task: {%Name}
Start Date: {%ActualStart}{dateTimeFormat:%dd-%MMM-%yyyy}
End Date: {%ActualEnd}{dateTimeFormat:%dd-%MMM-%yyyy}
Complete: {%Complete}%
</text>
<font color="Black"/>
</tooltip>
</row_datagrid>
−
<actual>
−
<bar_style>
−
<middle shape="Full">
<fill enabled="true" type="Solid" opacity="0.8" color="0x1D8BD1"/>
<border enabled="true" type="Solid" color="Black"/>
</middle>
−
<states>
−
<hover>
−
<middle>
<border enabled="true" type="Solid" color="Red"/>
</middle>
</hover>
</states>
−
<start>
−
<marker type="Rhomb">
<fill enabled="true" type="Solid" opacity="0.8" color="0x1D8BD1"/>
<border enabled="true" type="Solid" color="Black"/>
</marker>
</start>
−
<end>
−
<marker type="Rhomb">
<fill enabled="true" type="Solid" opacity="0.8" color="0x1D8BD1"/>
<border enabled="true" type="Solid" color="Black"/>
</marker>
</end>
</bar_style>
</actual>
−
<progress>
−
<bar_style>
−
<middle shape="Full">
<fill enabled="true" type="Solid" opacity="0.8" color="0xF1683C"/>
<border enabled="true" type="Solid" color="Black"/>
</middle>
−
<start>
−
<marker type="Rhomb">
<fill enabled="true" type="Solid" opacity="0.8" color="0xF1683C"/>
<border enabled="true" type="Solid" color="Black"/>
</marker>
</start>
−
<end>
−
<marker type="Rhomb">
<fill enabled="true" type="Solid" opacity="0.8" color="0xF1683C"/>
<border enabled="true" type="Solid" color="Black"/>
</marker>
</end>
</bar_style>
</progress>
−
<baseline>
−
<bar_style>
−
<middle shape="Full">
<fill enabled="true" type="Solid" opacity="0.8" color="0x2AD62A"/>
<border enabled="true" type="Solid" color="Black"/>
</middle>
−
<start>
−
<marker type="Rhomb">
<fill enabled="true" type="Solid" opacity="0.8" color="0x2AD62A"/>
<border enabled="true" type="Solid" color="Black"/>
</marker>
</start>
−
<end>
−
<marker type="Rhomb">
<fill enabled="true" type="Solid" opacity="0.8" color="0x2AD62A"/>
<border enabled="true" type="Solid" color="Black"/>
</marker>
</end>
</bar_style>
</baseline>
</task_style>
</task_styles>
−
<resource_styles>
−
<resource_style>
−
<row_datagrid>
−
<tooltip enabled="true">
−
<text>
Task: {%Name}
Start Date: {%ActualStart}{dateTimeFormat:%dd-%MMM-%yyyy}
End Date: {%ActualEnd}{dateTimeFormat:%dd-%MMM-%yyyy}
Complete: {%Complete}%
</text>
<font color="Black"/>
</tooltip>
</row_datagrid>
</resource_style>
</resource_styles>
−
<defaults>
−
<task>
−
<task_style>
−
<row_datagrid>
−
<tooltip enabled="true">
−
<text>
Task: {%Name}
Start Date: {%ActualStart}{dateTimeFormat:%dd-%MMM-%yyyy}
End Date: {%ActualEnd}{dateTimeFormat:%dd-%MMM-%yyyy}
Complete: {%Complete}%
</text>
<font color="Black"/>
</tooltip>
</row_datagrid>
</task_style>
</task>
</defaults>
</styles>
−
<project_chart>
−
<tasks>
<task id="1" parent="" name="STAGE1" actual_start="2010.08.11 12.08.00" actual_end="" progress="0" style="defaultStyle"/>
<task id="2" parent="" name="STAGE2" actual_start="" actual_end="" progress="0" style="defaultStyle"/>
<task id="3" parent="" name="STAGE3" actual_start="2010.07.27 12.07.00" actual_end="2010.08.06 12.08.00" progress="100" style="defaultStyle"/>
<task id="4" parent="" name="STAGE4" actual_start="" actual_end="" progress="0" style="defaultStyle"/>
<task id="5" parent="" name="STAGE5" actual_start="" actual_end="" progress="0" style="defaultStyle"/>
</tasks>
</project_chart>
</anygantt>
Thank you for your assistance.
Regards
Kylie

Different msgid shown in /var/adm/message as opposed to command line.

I've been trying to investigate an issue of how the /var/adm/messages alarms which has a message ID is different from a command line msgid output but have not been successful.
The test I have done is as follow:
logger -p local0.error -t TEST "Test Alarm for message ID"
The output I get in /var/adm/messages is :
May 3 14:00:28 hostname TEST: [ID 702911 local0.error] Test Alarm for message ID
However, when I compare the ID generated with /usr/sbin/msgid, the ID seems to be different.
bash-3.00# echo "Test Alarm for message ID" | msgid
*231001* Test Alarm for message ID
As you can see, the ID generated is different. Because of this, it's causing some issues on the alarm monitoring system and everything seems to fall under ID 702911. Anyone know how I can solve this problem?
Thanks in advance.

The source code for logger is available:
http://src.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/logger/logger.c
You could try fixing it... Looking at the syslog() calls it clearly has "%s" as one of the options. I guess you could find another piece of source code that makes syslog() calls and figure out what construct "should" be there.

Sun logs: /var/adm/messages vs. /var/svc/log/*

On Solaris 10, is /var/adm/messages still the "gold standard" for startup and shutdown log messages, or have the critical logs moved to /var/svc/log/$service_name?
It's not like I can't look in one or the other, but I'm trying to gauge the relative importance of the two.
Is there another location that I'm overlooking?

aaron.m wrote:
On Solaris 10, is /var/adm/messages still the "gold standard" for startup and shutdown log messages, or have the critical logs moved to /var/svc/log/$service_name?Depends on what you mean by "startup" messages. There are two types I can think of.
During boot the kernel might generate a few messages about drivers and buffers and stuff. This is stored in a kernel buffer that is visible when you type 'dmesg'. When syslog starts up, it dumps the contents into the messages file so you have a static copy. I don't think this behavior changes between Solaris 9 and Solaris 10.
For the actual startup "scripts" (SMF, /etc/init.d, /etc/rc?), Solaris 9 and earlier didn't have any sort of capture location. It was common for scripts to print to STDOUT/STDERR, and that would be delivered to the console only. Since many of the scripts are running before filesystems are mounted read/write, it didn't try to save the output.
Now with SMF, it does more work to capture that output and you can find that in the service log files that you mention.
So none of the logs have really moved, but you now have more logs than you did before.
Darren

Monitoring /var/adm/messages

Hello to all,
we are developing system for monitoring of the servers trough reading of the /var/adm/messages file.
Since there are numerous messages in this file we are wondering what regular expressions to use in order to extract serious/critical alerts from this file.
Does anybody have set of regular expressions to search for in this file for serious/critical events?
Thanks in advance.
Dejan

Hi ,
You can try to play whit /etc/syslog.conf . In this way you can made a filter for emergency and critical problem and redirect it to a specific file .
For example , the following line will redirect all the the emargency and critical message to /var/adm/message.critical
*.emerg;*.crit;* /var/adm/message.critical
I hope this help to develop your tool
xavier

SSH Error in the /var/adm/messages

Dears
I Have an error that appers many times in the system messages file,
**sshd[5437]: [ID 800047 auth.crit] fatal: Read from socket failed: Connection reset by peer**
i disabled the telnet and use the SSH to connect to the system, i dont have any problems in SSH my System but i always notice this error in the /var/adm/messages, does anyone knows what is this error and why it is generated?
thanks

Dear All i am also having the same problems
No1: MY SEVER T1000 having this problem,
Server was installed with jumpstart
Connection to 172.16.14.52 closed by foreign host.
# ssh 172.16.14.52
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that the RSA host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
69:15:c9:67:86:a4:43:95:9e:7d:d6:70:78:ea:46:cb.
Please contact your system administrator.
Add correct host key in /.ssh/known_hosts to get rid of this message.
Offending key in /.ssh/known_hosts:3
RSA host key for 172.16.14.52 has changed and you have requested strict checking.
Host key verification failed
No2: sshd[4070]: [ID 800047 auth.crit] fatal: Read from socket failed:Connection reset by peer
any body can help me..

/var/adm/messages

Hi,
I am trying to get some info from google about the following messages in the /var/am/messages, but I don't get anything.
ipfs: [ID 103742 kern.notice] /u06: memory limit of 10485760 exceeded
ipfs: [ID 459658 kern.notice] /u06: active up normal - link stopping (managed)
ipfs: [ID 859150 kern.notice] /u06: active down repair
someone can give me some tips.
I ll apreciate your help.

That must be an old script .. the real one parse-log1.pl appears to be the one called. Its a more generic version.
Its tied to the metric "Log File Pattern Matched Line Count".
Enter "/var/log/messages", and perhaps ERROR in the pattern match, remove the "%" they are wrong and not needed.

/var/adm/messages regopen warning

Hello,
I am observing a warning message in the /var/adm/messages
file of my Solaris 2.8 machine after I have run my application
for several hours (under a load). The resulting behavior is that
my application no longer responds to external requests and essentially
appears to hang.
The warning is the following:
Aug 23 16:44:07 eas1nc2 reg: [ID 286125 kern.warning] WARNING: regopen: failed, attempted to open > 1000 streams
Does anyone have any ideas as to what could be causing this
as well as possible resolutions.
Thanks in advance!!
Brad

Hello,
Take a look at /etc/syslog.conf. I think that by deafult this file should contain two entries that make the system log into /var/adm/messages. Are there these entries?
Bye,
Joseba M. Iturbe

Scsi messages in /var/adm/messages file

Hi,
After open the /var/adm/messages i have the SCSI error messages:
Jul 8 15:45:13 kapttdw2 Corrupt label; wrong magic number
Jul 8 15:45:13 kapttdw2 scsi: [ID 107833 kern.warning] WARNING: /ssm@0,0/pci@1a,600000/SUNW,qlc@1/fp@0,0/ssd@w5006048452a65588,2 (ssd129):
Jul 8 15:45:13 kapttdw2 Corrupt label; wrong magic number
Jul 8 15:45:13 kapttdw2 scsi: [ID 107833 kern.warning] WARNING: /ssm@0,0/pci@1a,600000/SUNW,qlc@1/fp@0,0/ssd@w5006048452a65588,2 (ssd129):
Jul 8 15:45:13 kapttdw2 Corrupt label; wrong magic number
Jul 8 15:45:13 kapttdw2 scsi: [ID 107833 kern.warning] WARNING: /ssm@0,0/pci@1a,600000/SUNW,qlc@1/fp@0,0/ssd@w5006048452a65588,2 (ssd129):
Jul 8 15:45:13 kapttdw2 Corrupt label; wrong magic number
Jul 8 15:45:13 kapttdw2 scsi: [ID 107833 kern.warning] WARNING: /ssm@0,0/pci@1a,600000/SUNW,qlc@1/fp@0,0/ssd@w5006048452a65588,2 (ssd129):
Jul 8 15:45:13 kapttdw2 Corrupt label; wrong magic number
Jul 8 15:45:13 kapttdw2 scsi: [ID 107833 kern.warning] WARNING: /ssm@0,0/pci@1a,600000/SUNW,qlc@1/fp@0,0/ssd@w5006048452a65588,2 (ssd129):
Jul 8 15:45:13 kapttdw2 Corrupt label; wrong magic number
Jul 8 15:45:13 kapttdw2 scsi: [ID 107833 kern.warning] WARNING: /ssm@0,0/pci@1a,600000/SUNW,qlc@1/fp@0,0/ssd@w5006048452a65588,2 (ssd129):
Jul 8 15:45:13 kapttdw2 Corrupt label; wrong magic number
bash-2.05$
Please help me to correct this error
Thank

This issue on hostname `kapttdw2` seems to be the same as you reported in your other thread for hostname `kapttdw1`.
[http://forums.sun.com/thread.jspa?threadID=5391935|http://forums.sun.com/thread.jspa?threadID=5391935]
Perhaps you just need to label these disks (as you were advised for those other disks).
Also, since these drives are in an EMC peripheral, you might consider opening a support case with that storage vendor and get advice from them.

/var/adm/messages file not updatiing

Hi All!
Can you pls help, I´m new into solaris, so I´ve got a problem, ever since I didi "> messages" inside the /var/adm/ direcotory the messages file does not update anymore.~
I´ve done ps -ef ! grep syslogd, and the deamon is running. So pls can you help?
regards
F.R.

Make sure /var/adm/message is writable by root only (chmod 600) and restart syslogd (svcadm restart system-log)

Getting lot of errors like :0x408 in /var/adm/messages file in Solaris 10

Hi,
Can anyone help me regarding the following errors being found in the /var/adm/messages file:
Nov 24 03:36:07 x9ce1 :0x408
Nov 24 03:36:07 x9ce1 dtcp: [ID 702911 kern.notice] WARNING GW (dtcp_klib.c,198) (53449,33458) (0xac120fd5,0xac126503)
Nov 24 03:36:07 x9ce1 dtcp: [ID 702911 kern.notice] WARNING PS (ps_udp.c,415) Error ps_do_DB_PS_Udp_Placement
Nov 24 03:36:07 x9ce1 :0x408
Nov 24 03:56:06 x9ce1 :0x408
Nov 24 03:56:06 x9ce1 dtcp: [ID 702911 kern.notice] WARNING GW (dtcp_klib.c,198) (55961,33458) (0xac120fd5,0xac126503)
Nov 24 03:56:06 x9ce1 dtcp: [ID 702911 kern.notice] WARNING PS (ps_udp.c,415) Error ps_do_DB_PS_Udp_Placement
Nov 24 03:56:06 x9ce1 :0x408
The frequency of this error is very high and I wanted to find out what could be the reason behind its occurrence?
Thanks.
Any useful comments will be most welcome :)
Jahan

Check /etc/init.d/dtcp , i guess it would be copyrighted to fujitsu-siemens if its the fujitsu dtcp. You can also9 do a pkginfo -l SMAWdtcp, which seems to be the name of the fujitsu package. Hmm, odd name for a Fujitsu package.
Actually i found the following Fujitsu bug:
A0559315 Fix flood of messages like dml_send DB_PS_Udp_Con_Remove_List failed
- caused by trying to send the message to a node that is down.
.. which seems rather familiar.
Its fixed with fujitsu patch 901199-08
Other Fujitsu DTCP patches are
901191-08 and 901244-01
Note that to get Fujitsu patches you need a special account, once you have an account you can download them from http://patches.ts.fujitsu.com/

/var/dam/messages empty

Similar Messages

Maybe you are looking for