Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

syslogd keeps failing

Discussion in 'General Discussion' started by ed.kalk, Oct 30, 2008.

  1. ed.kalk

    ed.kalk Well-Known Member

    Joined:
    Jun 19, 2008
    Messages:
    76
    Likes Received:
    0
    Trophy Points:
    56
    Location:
    Minneapolis, MN
    this keeps happening:

    syslogd failed @ Thu Oct 30 13:53:04 2008. A restart was attempted automagically.

    this is interesting:

    root@mailserver [/var/log]# tail -f messages
    Oct 30 15:11:05 mailserver syslogd 1.4.1: restart.
    Oct 30 15:11:05 mailserver syslog: syslogd startup succeeded
    Oct 30 15:11:05 mailserver kernel: klogd 1.4.1, log source = /proc/kmsg started.
    Oct 30 15:11:05 mailserver kernel: Inspecting /boot/System.map-2.4.27-2trsmp
    Oct 30 15:11:05 mailserver syslog: klogd startup succeeded
    Oct 30 15:11:05 mailserver kernel: Loaded 19577 symbols from /boot/System.map-2.4.27-2trsmp.
    Oct 30 15:11:05 mailserver kernel: Symbols match kernel version 2.4.27.
    Oct 30 15:11:05 mailserver kernel: Loaded 383 symbols from 12 modules.
    Oct 30 15:19:28 mailserver syslogsvcmgr: Syslog service manager called (pid:28682) (args:stop)
    Oct 30 15:19:28 mailserver syslogsvcmgr: pausing...
    Oct 30 15:19:43 mailserver syslogsvcmgr: resuming...
    Oct 30 15:19:43 mailserver kernel: Kernel logging (proc) stopped.
    Oct 30 15:19:43 mailserver kernel: Kernel log daemon terminating.
    Oct 30 15:19:44 mailserver syslog: klogd shutdown succeeded
    Oct 30 15:19:44 mailserver exiting on signal 15
    Oct 30 15:19:59 mailserver syslogd 1.4.1: restart.
    Oct 30 15:19:59 mailserver syslog: syslogd startup succeeded
    Oct 30 15:19:59 mailserver kernel: klogd 1.4.1, log source = /proc/kmsg started.
    Oct 30 15:19:59 mailserver kernel: Inspecting /boot/System.map-2.4.27-2trsmp
    Oct 30 15:19:59 mailserver syslog: klogd startup succeeded
    Oct 30 15:19:59 mailserver kernel: Loaded 19577 symbols from /boot/System.map-2.4.27-2trsmp.
    Oct 30 15:19:59 mailserver kernel: Symbols match kernel version 2.4.27.
    Oct 30 15:19:59 mailserver kernel: Loaded 383 symbols from 12 modules.
    Oct 30 15:19:44 mailserver syslog: syslogd shutdown succeeded
    Oct 30 15:19:44 mailserver syslogsvcmgr: Syslog service manager called (pid:28748) (args:start)
    Oct 30 15:19:44 mailserver syslogsvcmgr: pausing...
    Oct 30 15:19:59 mailserver syslogsvcmgr: resuming...

    syslogd failed @ Thu Oct 30 14:19:47 2008. A restart was attempted automagically.

    The time is off on syslogd by 1 hr too.. weird?
     
    #1 ed.kalk, Oct 30, 2008
    Last edited: Oct 30, 2008
  2. mtindor

    mtindor Well-Known Member

    Joined:
    Sep 14, 2004
    Messages:
    1,326
    Likes Received:
    50
    Trophy Points:
    178
    Location:
    inside a catfish
    cPanel Access Level:
    Root Administrator
    Odd. At any rate, if you have chkservd running on that machine, restart it.

    If using redhat/centos, execute this via ssh: service chkservd restart

    See if that doesn't stop it from happening.

    Mike
     
    #2 mtindor, Oct 30, 2008
  3. ed.kalk

    ed.kalk Well-Known Member

    Joined:
    Jun 19, 2008
    Messages:
    76
    Likes Received:
    0
    Trophy Points:
    56
    Location:
    Minneapolis, MN
    Thanks, I tried it and it still is doing it. thanks for the help, that's just not it.
    again thanks
     
    #3 ed.kalk, Oct 30, 2008
  4. deanstev

    deanstev Well-Known Member

    Joined:
    Jun 10, 2004
    Messages:
    110
    Likes Received:
    0
    Trophy Points:
    166
    Mine is doing the same....
     
    #4 deanstev, Oct 31, 2008
  5. ed.kalk

    ed.kalk Well-Known Member

    Joined:
    Jun 19, 2008
    Messages:
    76
    Likes Received:
    0
    Trophy Points:
    56
    Location:
    Minneapolis, MN
    Fixed!

    :)
    This message is from a Cpanel TEch:

    Hello:

    I FOUND IT! This is a result of the cPanel service monitor. The montior was looking for a process named syslogd run by root. In your case syslogd is run by the syslog user. I have edited /etc/chkserv.d/syslogd so that it checks for the syslog user.

    This resolves this matter. If you have further questions, or would like to have this ticket closed, please let me know.

    Thank you
    --
    John Bell, Technical Analyst 1
    cPanel


    I'm trying to get the lines of code from this guy and what was changed, along with what it was changed to... standby for more detail.
     
    #5 ed.kalk, Oct 31, 2008
  6. deanstev

    deanstev Well-Known Member

    Joined:
    Jun 10, 2004
    Messages:
    110
    Likes Received:
    0
    Trophy Points:
    166
    ok, keep us updated...
     
    #6 deanstev, Nov 1, 2008
  7. ed.kalk

    ed.kalk Well-Known Member

    Joined:
    Jun 19, 2008
    Messages:
    76
    Likes Received:
    0
    Trophy Points:
    56
    Location:
    Minneapolis, MN
    got the info from the guy

    he said:

    Sorry about the delay with this:

    If you look at /etc/chkserv.d/syslogd:
    ====
    root@mailserver [~]# cat /etc/chkserv.d/syslogd service[syslogd]=x,x,x,/scripts/restartsrv_syslogd,syslogd,syslog
    ====

    The last item in this comma delimited list is "syslog". This represents the user that the process will be running as when checked (as seen through the ps -ef command). Originally this was set to root.

    I found that your sytem was running syslogd not as root, but as the user "syslog". Because of this, I changed "root" to "syslog" in the above line.
    :)
     
    #7 ed.kalk, Nov 3, 2008
  8. deanstev

    deanstev Well-Known Member

    Joined:
    Jun 10, 2004
    Messages:
    110
    Likes Received:
    0
    Trophy Points:
    166
    Thanks!
    Worked a charm!
     
    #8 deanstev, Nov 4, 2008
  9. Ron Williams

    Ron Williams Member

    Joined:
    Oct 22, 2006
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    151
    I am having the same issue except my file has the following line:

    This is a completely new server and installation. I have received the following message ~150 times since I setup the server:
    I have tried restarting via service chkservd restart (getting command not found) without luck. Is there a place I can look to ensure syslogd is is installed properly?

    Also when looking at ps -ef syslogd is not shown.

    Centos 5, WHM VPS optimized v2.
     
    #9 Ron Williams, Dec 27, 2008
  10. Ron Williams

    Ron Williams Member

    Joined:
    Oct 22, 2006
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    151
    Ok, so this is a pretty simple one to figure out, I just wasn't looking in the correct place. Syslog was simply not installed. Check by running rpm -q sysklogd

    If nothing shows up, do the following:

    I'm using centos, so in order to fix it, I simply ran yum install sysklogd and everything worked correctly after.
     
    #10 Ron Williams, Jan 10, 2009
(You must log in or sign up to post here.)
Loading...
Similar Threads - syslogd keeps failing
  1. WooDzu

    Updating rsyslogd to 8.x

    WooDzu, Aug 26, 2017, in forum: General Discussion
    Replies:
    3
    Views:
    314
    cPanelMichael
    Aug 29, 2017
  2. Amgeek

    lfd keeps blocking one particular user

    Amgeek, Apr 26, 2018 at 9:31 AM, in forum: Security
    Replies:
    5
    Views:
    27
    Infopro
    Apr 26, 2018 at 4:02 PM
  3. JarekN

    Site keeps on getting hacked - infected files

    JarekN, Mar 15, 2018, in forum: Security
    Replies:
    6
    Views:
    153
    cPanelMichael
    Mar 15, 2018
  4. Daniel Yi

    Dovecot keeps shutting down and restarting.

    Daniel Yi, Nov 7, 2017, in forum: E-mail Discussions
    Replies:
    3
    Views:
    426
    cPanelMichael
    Nov 8, 2017
  5. rvdb

    global filter that forwards and keeps local copies?

    rvdb, Sep 21, 2017, in forum: E-mail Discussions
    Replies:
    3
    Views:
    255
    cPanelMichael
    Sep 22, 2017

Share This Page