Log files missing

voessli · Unread post by **voessli** » Wed Aug 02, 2006 12:23 pm

Hi all

i deleted my log to have some more space, well no new logs are written now, the folder is empty..
I switched PLESK Logmanager off and on, that did not help.
What could be the reason?

(Apache 2.0, Plesk 7.5)

Unread post by **scott** » Wed Aug 02, 2006 3:04 pm

The short answer is because you zapped the inode that syslog was using to spew data to the disk. Restart syslog, that should do it. For future reference to avoid this, rather than deleting the file, copy /dev/null to it.

voessli · Unread post by **voessli** » Wed Aug 02, 2006 4:49 pm

Thanks very much!

Snapdragon · Unread post by **Snapdragon** » Thu Aug 03, 2006 2:00 am

Good tip Scott.

voessli · Unread post by **voessli** » Thu Aug 03, 2006 8:33 am

The syslog daemon is running but on status request i get following messge:
klogd is stopped

I used touch .../statistics/logs/access.log which recovered the access.log but it remains 0 Byte.

Unread post by **scott** » Thu Aug 03, 2006 4:34 pm

access_log's are created by apache, touching the file will not reassociate an inode with the running process. When it starts it looks at the existing file and reads its inode number, when you delete it, and touch the new file it creates it with a new inode number, which the running process knows nothing about. Restarting the process will resolve the problem.

If klogd will not start on your system, that can be indicative of deeper problem, possibly that the system has been compromised. Use ps to look, never trust the init scripts to tell you the true status of a process.