CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 6 of 6

Thread: No log entries in /var/log/messages

  1. #1
    Join Date
    2006-05-23
    Location
    New Zealand
    Posts
    64
    Rep Power
    14

    Default No log entries in /var/log/messages

    Hi,

    I am running IPSO 3.8.

    I have noticed that there are no log entries in the /var/log/messages file or any of the archive message files.

    From the clish i have performed the following

    show logging
    Syslog Parameters
    Accept Syslog Messages from Remote Machines off
    System Configuration Auditlog permanent
    Destination Log Filename /var/log/messages
    Voyager AuditLog on

    The /var/log/messages file exisits, but i do not see any logging.

    Does anyone have any ideas how i can get this going again, preferably without a reboot :-)

    Thanks
    Walcat

  2. #2
    Join Date
    2008-03-21
    Location
    Cambridge, UK
    Posts
    43
    Rep Power
    0

    Default Re: No log entries in /var/log/messages

    Are you out of disk space? Do you get logs on the console if you leave it open? Is the syslog daemon running?

    df -k
    ps auxww | grep syslog

  3. #3
    Join Date
    2006-05-23
    Location
    New Zealand
    Posts
    64
    Rep Power
    14

    Default Re: No log entries in /var/log/messages

    Greg,

    I checked out the diskspace, results below

    df -k
    Filesystem 1K-blocks Used Avail Capacity Mounted on
    /dev/wd0f 599941 82890 469056 15% /
    /dev/wd0a 38193 90 35048 0% /config
    /dev/wd0d 29370489 402568 26618282 1% /var
    /dev/wd0e 4994605 228151 4366886 5% /opt
    procfs 4 4 0 100% /proc

    And from the PS command i could not see syslog running, im guessing this must be my problem is it easy to restart without being service impacting ?


    Thanks for your help

  4. #4
    Join Date
    2006-05-23
    Location
    New Zealand
    Posts
    64
    Rep Power
    14

    Default Re: No log entries in /var/log/messages

    Any thoughts guys ?

    Suggestion of reboot has been passed by me, but hoping this can be resolved without being service impacting, was hoping the syslogd could be restarted without a reboot ???

    Thanks

  5. #5
    Join Date
    2006-02-18
    Posts
    38
    Rep Power
    0

    Default Re: No log entries in /var/log/messages

    you need to reboot NOKIA appliance to run set syslog from clish

  6. #6
    Join Date
    2006-05-23
    Location
    New Zealand
    Posts
    64
    Rep Power
    14

    Default Re: No log entries in /var/log/messages

    Thanks for the reply

    So the only way to restart the syslog daemon is to reboot the appliance ?

    Was hoping that wouldnt be the answer

Similar Threads

  1. How many log entries
    By foo727 in forum Check Point UTM-1 Edge Appliances
    Replies: 0
    Last Post: 2009-06-22, 05:56
  2. Where to put Manual ARP entries?
    By hotice_ in forum Resilience
    Replies: 3
    Last Post: 2007-11-26, 15:30
  3. Daemon entries in log???
    By Kheiron in forum SmartView Tracker
    Replies: 1
    Last Post: 2007-04-04, 09:49
  4. Strange SmartDefense entries
    By gfont96 in forum IPS Blade (Formerly SmartDefense)
    Replies: 7
    Last Post: 2006-12-16, 17:41
  5. Nokia ignoring register stop messages, join messages
    By csterlin88001 in forum Check Point IP Appliances and IPSO (Formerly Sold By Nokia)
    Replies: 1
    Last Post: 2006-12-07, 18:38

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •