You are on page 1of 3

RHEL5 / RHEL6 /var/log/messages age exceeds 1d

threshold permenent fix.


Scope

Permanent fix for /var/log/messages age exceeds issue in SRA REHL5 and RHEL6 servers.

RHEL5:
Modify syslog to log MARK messages in /var/log/messages
step 1: enable syslogd options to MARK message

# vi /etc/sysconfig/syslog

modify SYSLOGD_OPTIONS="-m 0" entry to SYSLOGD_OPTIONS="-m 60" (which will send MARK message to /var/log/messages in
every 1 hour.

SYSLOGD_OPTIONS="-m 0" --> disables 'MARK' messages

SYSLOGD_OPTIONS="-m 10" --> log 'MARK' messages to '/var/log/messages' in every 10 minutes

SYSLOGD_OPTIONS="-m 60" --> log 'MARK' messages to '/var/log/messages' in every 1 hour

Step 2 : Restart syslog to take effects of modification

# /etc/init.d/syslog restart
RHEL 6:
Modify rsyslog to log MARK messages in /var/log/messages
step 1: enable syslogd options to MARK message

# vi /etc/rsyslog.conf

Add below entries to /etc/rsyslog.conf

$ActionWriteAllMarkMessages on

$ModLoad immark

$MarkMessagePeriod 3600

$ActionWriteAllMarkMessages on --> Enable 'MARK' messages

$ModLoad immark --> immark input module will be loaded

$MarkMessagePeriod 3600 --> log 'MARK' messages to '/var/log/messages' in every 1 hour

Step 2 : Restart rsyslog to take effects of modification

# /etc/init.d/rsyslog restart

You might also like