AF:
NF:0
PS:10
SRH:1
SFN:
DSR:
MID:<20080111134611.7c789de8@ripper.onstor.net>
CFG:
PT:0
S:andy.sharp@onstor.com
RQ:
SSV:onstor-exch02.onstor.net
NSV:
SSH:
R:<larry.scheer@onstor.com>
MAID:1
X-Sylpheed-Privacy-System:
X-Sylpheed-Sign:0
SCF:#mh/Mailbox/sent
RMID:#imap/andys@onstor.net@onstor-exch02.onstor.net/INBOX	0	BB375AF679D4A34E9CA8DFA650E2B04E079AC404@onstor-exch02.onstor.net
X-Sylpheed-End-Special-Headers: 1
Date: Fri, 11 Jan 2008 13:46:36 -0800
From: Andrew Sharp <andy.sharp@onstor.com>
Cc: "Larry Scheer" <larry.scheer@onstor.com>
Subject: Re: log messages
Message-ID: <20080111134636.50726e00@ripper.onstor.net>
In-Reply-To: <BB375AF679D4A34E9CA8DFA650E2B04E079AC404@onstor-exch02.onstor.net>
References: <20080111110455.1ec586fd@ripper.onstor.net>
	<BB375AF679D4A34E9CA8DFA650E2B04E079AC35D@onstor-exch02.onstor.net>
	<BB375AF679D4A34E9CA8DFA650E2B04E079AC36E@onstor-exch02.onstor.net>
	<20080111114057.3c6b9afd@ripper.onstor.net>
	<BB375AF679D4A34E9CA8DFA650E2B04E079AC3A6@onstor-exch02.onstor.net>
	<20080111115448.480311b9@ripper.onstor.net>
	<BB375AF679D4A34E9CA8DFA650E2B04E079AC404@onstor-exch02.onstor.net>
Organization: Onstor
X-Mailer: Sylpheed-Claws 2.6.0 (GTK+ 2.8.20; x86_64-pc-linux-gnu)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Unrelated, but I notice a few things wrong with this.  We need to make
some changes to this for cougar.  I think.

On Fri, 11 Jan 2008 12:10:48 -0800 "John Keiffer"
<john.keiffer@onstor.com> wrote:

> # cat /etc/syslog.conf
> # Log all kernel messages to the console.
> # Logging much else clutters up the screen.
> #kern.*                                                 /dev/console
> 
> # Log anything (except mail) of level info or higher.
> # Don't log private authentication messages!
> *.info;local0,local1,local2,local3,local4,local5,local6,local7.none;mail
> .none;news.none;authpriv.none;cron.none         /var/log/messages
> 
> # The authpriv file has restricted access.
> authpriv.*                                              /var/log/secure
> 
> # Log all the mail messages in one place.
> mail.*                                                  /var/log/maillog
> 
> 
> # Log cron stuff
> cron.*                                                  /var/cron/log
> 
> # Everybody gets emergency messages, plus log them on another
> # machine.
> *.emerg                                                 *
> 
> #
> # NFX stuff
> #
> #
> # quota event log
> local6.info             /var/quotas/events
> 
> # virus scan log
> local7.info             /var/log/vscan
> 
> # elog general log
> local0.info             /var/log/onstor/messages
> 
> local0.*                /dev/console
> 
> -----Original Message-----
> From: Andy Sharp 
> Sent: Friday, January 11, 2008 11:55 AM
> To: John Keiffer
> Cc: Vikas Saini; Larry Scheer
> Subject: Re: log messages
> 
> On Fri, 11 Jan 2008 11:42:07 -0800 "John Keiffer"
> <john.keiffer@onstor.com> wrote:
> 
> > 
> > Yes all from the same machine and the cmds all issued right after
> > each other...
> 
> Please file a must-fix bug assigned to me, then.  The
> directory /var/agile and it's contents should not exist.  Those log
> messages should be in /var/log/onstor/messages with all the others.
> 
> What does your /etc/syslog.conf file look like?
> 
> 
> > -----Original Message-----
> > From: Andy Sharp 
> > Sent: Friday, January 11, 2008 11:41 AM
> > To: John Keiffer
> > Cc: Vikas Saini; Larry Scheer
> > Subject: Re: log messages
> > 
> > Are these all on the same machine?
> > 
> > /var/log/messages is the standard place for system log messages,
> > like from the kernel and from rcon (which is sort of the kernel).
> > The sshd logs shouldn't be there.  Larry, is that a bug?  Shouldn't
> > they go in /var/log/auth, or the onstor messages file?  I'm pretty
> > sure that ntp daemon messages should go in /var/log/daemon.log in
> > Cougar (bob/coug).
> > 
> > 
> > On Fri, 11 Jan 2008 11:21:43 -0800 "John Keiffer"
> > <john.keiffer@onstor.com> wrote:
> > 
> > > # tail /var/log/messages
> > > 
> > > Jan 11 10:23:14 g1r5 sshd[15220]: Server listening on 0.0.0.0 port
> > > 22.
> > > 
> > > Jan 11 10:23:18 g1r5 ntpdate[19627]: step time server 10.0.0.18
> > > offset -0.189046 sec
> > > 
> > > Jan 11 10:23:19 g1r5 ntpd[3014]: ntpd 4.1.0 Tue Nov 13 13:44:47
> > > PST 2007 (10)
> > > 
> > > Jan 11 10:23:19 g1r5 ntpd[3014]: precision = 6 usec
> > > 
> > > Jan 11 10:23:19 g1r5 ntpd[3014]: kernel time discipline status
> > > 0040
> > > 
> > > Jan 11 10:23:20 g1r5 ntpd[3014]: frequency initialized -1.886 from
> > > /var/ntp/drift
> > > 
> > > Jan 11 10:23:27 g1r5 syslogd: restart
> > > 
> > > Jan 11 10:26:44 g1r5 ntpd[3014]: kernel time discipline status
> > > change 41
> > > 
> > > Jan 11 10:35:07 g1r5 sshd[7262]: Accepted password for root from
> > > 10.0.0.41 port 1890 ssh2
> > > 
> > > Jan 11 10:36:35 g1r5 sshd[26736]: Accepted password for root from
> > > 10.0.0.41 port 1903 ssh2
> > > 
> > >  
> > > 
> > > # tail /var/log/onstor/messages
> > > 
> > > Jan 11 10:38:38 g1r5 : 1:1:nfs:INFO: 21: Created mount entry
> > > 0x1000fde600, centry=0x100255e480, raddr=0x1501020a,
> > > share_id=0x2715, mnt_inum_snap=0x2, gennum=0x1 minAuth=0,
> > > maxAuth=1
> > > 
> > > Jan 11 10:39:05 g1r5 : 0:0:nfxsh:NOTICE: cmd[17]: system show
> > > version  : status[0]
> > > 
> > > Jan 11 10:41:16 g1r5 : 0:0:nfxsh:NOTICE: cmd[18]: system show
> > > chassis  : status[0]
> > > 
> > > Jan 11 10:41:20 g1r5 : 0:0:nfxsh:NOTICE: cmd[19]: useraccount
> > > show  : status[0]
> > > 
> > > Jan 11 10:41:37 g1r5 : 0:0:nfxsh:NOTICE: cmd[20]: useraccount add
> > > jkeiffer  : status[0]
> > > 
> > > Jan 11 10:41:41 g1r5 : 0:0:nfxsh:NOTICE: cmd[21]: useraccount
> > > show  : status[0]
> > > 
> > > Jan 11 10:41:57 g1r5 : 0:0:nfxsh:NOTICE: cmd[22]: useraccount add
> > > johnr : status[0]
> > > 
> > > Jan 11 10:41:59 g1r5 : 0:0:nfxsh:NOTICE: cmd[23]: useraccount
> > > show  : status[0]
> > > 
> > > Jan 11 10:42:13 g1r5 : 0:0:nfxsh:NOTICE: cmd[24]: useraccount add
> > > raj : status[0]
> > > 
> > > Jan 11 10:42:14 g1r5 : 0:0:nfxsh:NOTICE: cmd[25]: useraccount
> > > show  : status[0]
> > > 
> > >  
> > > 
> > > # tail /var/agile/messages
> > > 
> > > Jan 10 11:14:26 g1r5 pm: pm_terminate: child 25661
> > > (/usr/local/agile/bin/snmpd) terminated
> > > 
> > > Jan 10 11:14:26 g1r5 pm: pm_terminate: child 29457
> > > (/usr/local/agile/bin/cluster_contrl) terminated
> > > 
> > > Jan 10 11:14:26 g1r5 pm: pm_terminate: child 8981
> > > (/usr/local/agile/bin/cluster_server) terminated
> > > 
> > > Jan 10 11:14:26 g1r5 pm: pm_terminate: child 9106
> > > (/usr/local/agile/bin/evm_cfgd) terminated
> > > 
> > > Jan 10 11:14:26 g1r5 pm: pm_terminate: child 28531
> > > (/usr/local/agile/bin/sdm_cfgd) terminated
> > > 
> > > Jan 10 11:14:26 g1r5 pm: pm_terminate: child 23347
> > > (/usr/local/agile/bin/chassisd) terminated
> > > 
> > > Jan 10 11:14:26 g1r5 pm: pm_terminate: child 29241
> > > (/usr/local/agile/bin/timekeeper) terminated
> > > 
> > > Jan 10 11:14:26 g1r5 pm: pm_terminate: child 15008
> > > (/usr/local/agile/bin/eventd) terminated
> > > 
> > > Jan 10 11:14:26 g1r5 pm: pm_terminate: child 31552
> > > (/usr/local/agile/bin/ncmd) terminated
> > > 
> > > Jan 10 11:14:26 g1r5 pm: pm_terminate: child 30042
> > > (/usr/local/agile/bin/elog) terminated
> > > 
> > >  
> > > 
> > > -----Original Message-----
> > > From: Vikas Saini 
> > > Sent: Friday, January 11, 2008 11:15 AM
> > > To: Andy Sharp
> > > Cc: John Keiffer
> > > Subject: RE: log messages
> > > 
> > >  
> > > 
> > > John,
> > > 
> > >    Check what we get in /var/log/messages on bobcat... I doubt if
> > > there is anything on that file.
> > > 
> > >  
> > > 
> > > Vikas
> > > 
> > >  
> > > 
> > >  
> > > 
> > > -----Original Message-----
> > > 
> > > From: Andy Sharp 
> > > 
> > > Sent: Friday, January 11, 2008 11:05 AM
> > > 
> > > To: Vikas Saini
> > > 
> > > Cc: John Keiffer
> > > 
> > > Subject: Re: log messages
> > > 
> > >  
> > > 
> > > On Fri, 11 Jan 2008 11:00:49 -0800 "Vikas Saini"
> > > 
> > > <vikas.saini@onstor.com> wrote:
> > > 
> > >  
> > > 
> > > > Correction 
> > > 
> > > > 
> > > 
> > > >  
> > > 
> > > > 
> > > 
> > > > 1.  On Cougar HW platform we should
> > > 
> > > > use /var/log/onstor/messages. 2.  On Bobcat HW running Cougar
> > > 
> > > > we should use /var/agile/messages.
> > > 
> > > > 
> > > 
> > > >  
> > > 
> > > > 
> > > 
> > > > We don't have a equivalent of /var/log/messages on bobcat.
> > > 
> > >  
> > > 
> > > Clarification:
> > > 
> > >  
> > > 
> > > Any software built from the same tree should have the log files in
> > > the
> > > 
> > > same place regardless of which hardware it's running on, or even
> > > which
> > > 
> > > operating system.  Linux/OpenBSD; Cougar/Bobcat.  It makes no
> > > 
> > > difference.
> > > 
