CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


First, I hope you're all well and staying safe.
Second, I want to give a "heads up" that you should see more activity here shortly, and maybe a few cosmetic changes.
I'll post more details to the "Announcements" forum soon, so be on the lookout. -E

 

Results 1 to 6 of 6

Thread: No log entries in /var/log/messages

  1. #1
    Join Date
    2006-05-23
    Location
    New Zealand
    Posts
    64
    Rep Power
    15

    Default No log entries in /var/log/messages

    Hi,

    I am running IPSO 3.8.

    I have noticed that there are no log entries in the /var/log/messages file or any of the archive message files.

    From the clish i have performed the following

    show logging
    Syslog Parameters
    Accept Syslog Messages from Remote Machines off
    System Configuration Auditlog permanent
    Destination Log Filename /var/log/messages
    Voyager AuditLog on

    The /var/log/messages file exisits, but i do not see any logging.

    Does anyone have any ideas how i can get this going again, preferably without a reboot :-)

    Thanks
    Walcat

  2. #2
    Join Date
    2008-03-21
    Location
    Cambridge, UK
    Posts
    43
    Rep Power
    0

    Default Re: No log entries in /var/log/messages

    Are you out of disk space? Do you get logs on the console if you leave it open? Is the syslog daemon running?

    df -k
    ps auxww | grep syslog

  3. #3
    Join Date
    2006-05-23
    Location
    New Zealand
    Posts
    64
    Rep Power
    15

    Default Re: No log entries in /var/log/messages

    Greg,

    I checked out the diskspace, results below

    df -k
    Filesystem 1K-blocks Used Avail Capacity Mounted on
    /dev/wd0f 599941 82890 469056 15% /
    /dev/wd0a 38193 90 35048 0% /config
    /dev/wd0d 29370489 402568 26618282 1% /var
    /dev/wd0e 4994605 228151 4366886 5% /opt
    procfs 4 4 0 100% /proc

    And from the PS command i could not see syslog running, im guessing this must be my problem is it easy to restart without being service impacting ?


    Thanks for your help

  4. #4
    Join Date
    2006-05-23
    Location
    New Zealand
    Posts
    64
    Rep Power
    15

    Default Re: No log entries in /var/log/messages

    Any thoughts guys ?

    Suggestion of reboot has been passed by me, but hoping this can be resolved without being service impacting, was hoping the syslogd could be restarted without a reboot ???

    Thanks

  5. #5
    Join Date
    2006-02-18
    Posts
    38
    Rep Power
    0

    Default Re: No log entries in /var/log/messages

    you need to reboot NOKIA appliance to run set syslog from clish

  6. #6
    Join Date
    2006-05-23
    Location
    New Zealand
    Posts
    64
    Rep Power
    15

    Default Re: No log entries in /var/log/messages

    Thanks for the reply

    So the only way to restart the syslog daemon is to reboot the appliance ?

    Was hoping that wouldnt be the answer

Similar Threads

  1. How many log entries
    By foo727 in forum Check Point UTM-1 Edge Appliances
    Replies: 0
    Last Post: 2009-06-22, 05:56
  2. Where to put Manual ARP entries?
    By hotice_ in forum Resilience
    Replies: 3
    Last Post: 2007-11-26, 15:30
  3. Daemon entries in log???
    By Kheiron in forum SmartView Tracker
    Replies: 1
    Last Post: 2007-04-04, 09:49
  4. Strange SmartDefense entries
    By gfont96 in forum IPS Blade (Formerly SmartDefense)
    Replies: 7
    Last Post: 2006-12-16, 17:41
  5. Nokia ignoring register stop messages, join messages
    By csterlin88001 in forum Check Point IP Appliances and IPSO (Formerly Sold By Nokia)
    Replies: 1
    Last Post: 2006-12-07, 18:38

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •