Where are the logs/how do you turn on logging in AIX?

We have an AIX system no one knows how to use. We need to see the log files (standard /var/log/ stuff in Linux) but apparently it's not there... I'm assuming thats because its not turned on.

How do you find the logs or enable them in AIX?

LVL 2
edskeeAsked:
Who is Participating?
 
tfewsterConnect With a Mentor Commented:
This standard setup will log just about everything to /var/log/syslog; Comprehensive, but irritating.
#
*.info                  /var/log/syslog
mail.debug              /var/log/maildebug
lpr.debug               /var/log/lpr.log

In AIX  4.3, it's /usr/sbin/syslogd - what's the parent process for your syslog process?
0
 
freesourceCommented:
Look in /var/adm

To enable logs read the man pages, AIX has syslogd just like Linux.
0
 
tfewsterCommented:
/etc/syslog.conf defines what is logged (& where) by syslogd
0
Introducing Cloud Class® training courses

Tech changes fast. You can learn faster. That’s why we’re bringing professional training courses to Experts Exchange. With a subscription, you can access all the Cloud Class® courses to expand your education, prep for certifications, and get top-notch instructions.

 
edskeeAuthor Commented:
Freesource: if I wanted someone to tell me to read the man pages I would not have posted the question here. Jeez.
0
 
tfewsterCommented:
To be fair to freesource, s/he probably meant "read  the man page for syslogd".

From what I can see on the AIX box I have access to, the default location for the syslog log IS /var/log - So it's not there, someone has been messing about with /etc/syslog.conf, and may even have disabled syslogd (started by srcmstr)
0
 
edskeeAuthor Commented:
My /etc/syslog.conf file is all commented out. Can someone post a 'standard' copy of their /etc/syslog.conf file? The man page for syslogd is a bit confusing.

Thanks!

Oh, I don't have syslogd running in my process list, however I do have /usr/sbin/syslog running... any ideas?
0
 
edskeeAuthor Commented:
The main things we want to log are the user logins, so we can see who is coming in when.

The parent process? Dunno, whats the easiest way to find out?
0
 
tfewsterCommented:
I suggest you use "last" for tracking logins; It shows user, login device & login times. e.g. last |grep tfewster would show you my login history.

syslog will mainly show you errors, e.g. bad "su" attempts.

To find the parent process, I was thinking of
ps -f |grep syslog to get it's parent process id, then  ps -f |grep parent_process_id - sloppy, but quick.
0
 
edskeeAuthor Commented:
Close enough... got me what I needed, thanks!
0
 
freesourceCommented:
Thanks, tfewster, that's exactly what I meant.  And edskee read the man page on syslog.conf it goes into a lot more detail.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.