/etc/syslog.conf and /etc/rsyslog.conf files

The /etc/syslog.conf and /etc/rsyslog.conf files are used to control the output of the syslogd daemon log files, which Cluster Aware AIX uses to log the debug information and PowerHA® SystemMirror® uses to log the non-critical information.

During the installation process, PowerHA SystemMirror reads the subsystem. Depending on the subsystem, following entries are added to the file that directs the output from PowerHA SystemMirror-related problems to certain files.

# example:
# "mail messages, at debug or higher, go to Log file. File must exist."
# "all facilities, at debug and higher, go to console"
# "all facilities, at crit or higher, go to all users"
#  mail.debug           /usr/spool/mqueue/syslog
#  *.debug              /dev/console
#  *.crit                       *
#  *.debug              /tmp/syslog.out     rotate size 100k files 4
#  *.crit               /tmp/syslog.out     rotate time 1d
local0.crit /dev/console
local0.info /var/hacmp/adm/cluster.log
user.notice /var/hacmp/adm/cluster.log
daemon.notice /var/hacmp/adm/cluster.log

If you want to use the /rtc/rsyslogd.conf file after installing the PowerHA SystemMirror, you can run the following command to convert the existing /etc/syslog.conf file into the /etc/rsyslog.conf file on all the cluster nodes.

/usr/sbin/syslog_ssw -c /etc/syslog.conf /etc/rsyslog.conf

Then, convert the syslogd daemon by running the following command:

syslog_ssw -r

An output similar following example is displayed:


0513-077 Subsystem has been changed.
Start daemon: syslogd
0513-059 The syslogd Subsystem has been started. Subsystem PID is 4456860.

You can view the following entries in the /etc/rsyslog.conf file and you might also view additional entries based on your /etc/rsyslog.conf configuration file.


aso.notice /var/log/aso/aso.log
aso.info /var/log/aso/aso_process.log
aso.debug /var/log/aso/aso_debug.log
caa.debug;caa. /var/adm/ras/syslog.caa .info /var/adm/ras/syslog.txt
local0.info;user.notice;daemon.notice /var/hacmp/adm/cluster.log

Note:

Irrespective of type of the syslogd daemon type, the lssrc command always shows the state of the subsystem as syslog.

To determine which syslogd daemon is enabled, run the following commands:

ps -ef | grep syslog
An output similar to the following example is displayed:
```
root 26869770 4128770 0 04:19:37 - 0:00 /usr/sbin/rsyslogd
```

odmget -q subsysname = 'syslogd' SRCsubsys

An output similar to the following example is displayed:


SRCsubsys:
subsysname = "syslogd"
synonym = ""
cmdargs = ""
path = "/usr/sbin/rsyslogd" <<<< rsyslogd is enabled
uid = 0
auditid = 0
standin = "/dev/console"
standout = "/dev/console"
standerr = "/dev/console"
action = 1
multi = 1
contact = 3
svrkey = 0
svrmtype = 0
priority = 20
signorm = 0
sigforce = 0
display = 1
waittime = 20
grpname = "ras"

Note:

The /etc/rsyslog.conf files must be identical on all cluster nodes.
PowerHA SystemMirror does not support rotation of log files when the rsyslogd daemon is enabled because the rsyslogd daemon requires special mechanism to rotate the log files.