AF:
NF:0
PS:10
SRH:1
SFN:
DSR:
MID:<20080111114022.25cf4be4@ripper.onstor.net>
CFG:
PT:0
S:andy.sharp@onstor.com
RQ:
SSV:onstor-exch02.onstor.net
NSV:
SSH:
R:<john.keiffer@onstor.com>,<vikas.saini@onstor.com>,<larry.scheer@onstor.com>
MAID:1
X-Sylpheed-Privacy-System:
X-Sylpheed-Sign:0
SCF:#mh/Mailbox/sent
RMID:#imap/andys@onstor.net@onstor-exch02.onstor.net/INBOX	0	BB375AF679D4A34E9CA8DFA650E2B04E079AC36E@onstor-exch02.onstor.net
X-Sylpheed-End-Special-Headers: 1
Date: Fri, 11 Jan 2008 11:40:57 -0800
From: Andrew Sharp <andy.sharp@onstor.com>
To: "John Keiffer" <john.keiffer@onstor.com>
Cc: "Vikas Saini" <vikas.saini@onstor.com>, Larry Scheer
 <larry.scheer@onstor.com>
Subject: Re: log messages
Message-ID: <20080111114057.3c6b9afd@ripper.onstor.net>
In-Reply-To: <BB375AF679D4A34E9CA8DFA650E2B04E079AC36E@onstor-exch02.onstor.net>
References: <20080111110455.1ec586fd@ripper.onstor.net>
	<BB375AF679D4A34E9CA8DFA650E2B04E079AC35D@onstor-exch02.onstor.net>
	<BB375AF679D4A34E9CA8DFA650E2B04E079AC36E@onstor-exch02.onstor.net>
Organization: Onstor
X-Mailer: Sylpheed-Claws 2.6.0 (GTK+ 2.8.20; x86_64-pc-linux-gnu)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Are these all on the same machine?

/var/log/messages is the standard place for system log messages, like
from the kernel and from rcon (which is sort of the kernel).  The sshd
logs shouldn't be there.  Larry, is that a bug?  Shouldn't they go
in /var/log/auth, or the onstor messages file?  I'm pretty sure that ntp
daemon messages should go in /var/log/daemon.log in Cougar (bob/coug).


On Fri, 11 Jan 2008 11:21:43 -0800 "John Keiffer"
<john.keiffer@onstor.com> wrote:

> # tail /var/log/messages
> 
> Jan 11 10:23:14 g1r5 sshd[15220]: Server listening on 0.0.0.0 port 22.
> 
> Jan 11 10:23:18 g1r5 ntpdate[19627]: step time server 10.0.0.18 offset
> -0.189046 sec
> 
> Jan 11 10:23:19 g1r5 ntpd[3014]: ntpd 4.1.0 Tue Nov 13 13:44:47 PST
> 2007 (10)
> 
> Jan 11 10:23:19 g1r5 ntpd[3014]: precision = 6 usec
> 
> Jan 11 10:23:19 g1r5 ntpd[3014]: kernel time discipline status 0040
> 
> Jan 11 10:23:20 g1r5 ntpd[3014]: frequency initialized -1.886 from
> /var/ntp/drift
> 
> Jan 11 10:23:27 g1r5 syslogd: restart
> 
> Jan 11 10:26:44 g1r5 ntpd[3014]: kernel time discipline status change
> 41
> 
> Jan 11 10:35:07 g1r5 sshd[7262]: Accepted password for root from
> 10.0.0.41 port 1890 ssh2
> 
> Jan 11 10:36:35 g1r5 sshd[26736]: Accepted password for root from
> 10.0.0.41 port 1903 ssh2
> 
>  
> 
> # tail /var/log/onstor/messages
> 
> Jan 11 10:38:38 g1r5 : 1:1:nfs:INFO: 21: Created mount entry
> 0x1000fde600, centry=0x100255e480, raddr=0x1501020a, share_id=0x2715,
> mnt_inum_snap=0x2, gennum=0x1 minAuth=0, maxAuth=1
> 
> Jan 11 10:39:05 g1r5 : 0:0:nfxsh:NOTICE: cmd[17]: system show
> version  : status[0]
> 
> Jan 11 10:41:16 g1r5 : 0:0:nfxsh:NOTICE: cmd[18]: system show
> chassis  : status[0]
> 
> Jan 11 10:41:20 g1r5 : 0:0:nfxsh:NOTICE: cmd[19]: useraccount show  :
> status[0]
> 
> Jan 11 10:41:37 g1r5 : 0:0:nfxsh:NOTICE: cmd[20]: useraccount add
> jkeiffer  : status[0]
> 
> Jan 11 10:41:41 g1r5 : 0:0:nfxsh:NOTICE: cmd[21]: useraccount show  :
> status[0]
> 
> Jan 11 10:41:57 g1r5 : 0:0:nfxsh:NOTICE: cmd[22]: useraccount add
> johnr : status[0]
> 
> Jan 11 10:41:59 g1r5 : 0:0:nfxsh:NOTICE: cmd[23]: useraccount show  :
> status[0]
> 
> Jan 11 10:42:13 g1r5 : 0:0:nfxsh:NOTICE: cmd[24]: useraccount add
> raj : status[0]
> 
> Jan 11 10:42:14 g1r5 : 0:0:nfxsh:NOTICE: cmd[25]: useraccount show  :
> status[0]
> 
>  
> 
> # tail /var/agile/messages
> 
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 25661
> (/usr/local/agile/bin/snmpd) terminated
> 
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 29457
> (/usr/local/agile/bin/cluster_contrl) terminated
> 
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 8981
> (/usr/local/agile/bin/cluster_server) terminated
> 
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 9106
> (/usr/local/agile/bin/evm_cfgd) terminated
> 
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 28531
> (/usr/local/agile/bin/sdm_cfgd) terminated
> 
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 23347
> (/usr/local/agile/bin/chassisd) terminated
> 
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 29241
> (/usr/local/agile/bin/timekeeper) terminated
> 
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 15008
> (/usr/local/agile/bin/eventd) terminated
> 
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 31552
> (/usr/local/agile/bin/ncmd) terminated
> 
> Jan 10 11:14:26 g1r5 pm: pm_terminate: child 30042
> (/usr/local/agile/bin/elog) terminated
> 
>  
> 
> -----Original Message-----
> From: Vikas Saini 
> Sent: Friday, January 11, 2008 11:15 AM
> To: Andy Sharp
> Cc: John Keiffer
> Subject: RE: log messages
> 
>  
> 
> John,
> 
>    Check what we get in /var/log/messages on bobcat... I doubt if
> there is anything on that file.
> 
>  
> 
> Vikas
> 
>  
> 
>  
> 
> -----Original Message-----
> 
> From: Andy Sharp 
> 
> Sent: Friday, January 11, 2008 11:05 AM
> 
> To: Vikas Saini
> 
> Cc: John Keiffer
> 
> Subject: Re: log messages
> 
>  
> 
> On Fri, 11 Jan 2008 11:00:49 -0800 "Vikas Saini"
> 
> <vikas.saini@onstor.com> wrote:
> 
>  
> 
> > Correction 
> 
> > 
> 
> >  
> 
> > 
> 
> > 1.  On Cougar HW platform we should
> 
> > use /var/log/onstor/messages. 2.  On Bobcat HW running Cougar
> 
> > we should use /var/agile/messages.
> 
> > 
> 
> >  
> 
> > 
> 
> > We don't have a equivalent of /var/log/messages on bobcat.
> 
>  
> 
> Clarification:
> 
>  
> 
> Any software built from the same tree should have the log files in the
> 
> same place regardless of which hardware it's running on, or even which
> 
> operating system.  Linux/OpenBSD; Cougar/Bobcat.  It makes no
> 
> difference.
> 
