I accidentally deleted /var/log/syslog and now I can't get rsyslog working.
I was googling, I tried everything I found. To be precise:
I created syslog with touch.
Then I set chmod and chown correctly. Now ls -al
gives this result:
-rw-r----- 1 syslog adm 0 jún 23 02:36 syslog
-rw-r----- 1 syslog adm 1557257 jún 23 01:33 syslog.1
-rw-r----- 1 syslog adm 156618 jún 22 07:51 syslog.2.gz
-rw-r----- 1 syslog adm 155851 jún 21 07:45 syslog.3.gz
-rw-r----- 1 syslog adm 155199 jún 20 07:35 syslog.4.gz
-rw-r----- 1 syslog adm 159709 jún 19 07:37 syslog.5.gz
-rw-r----- 1 syslog adm 156035 jún 18 07:52 syslog.6.gz
-rw-r----- 1 syslog adm 158478 jún 17 07:55 syslog.7.gz
Then I restarted rsyslog service:
service rsyslog restart
I rebooted the system several times.
I even re-installed rsyslog with apt-get purge
and apt-get install
But none of these helped me. As you can see above, syslog still has a length of 0 bytes, nothing gets logged.
Edit:
Even when I'm trying to log something manually, nothing gets logged:
# ls -al /var/log/syslog
-rw-r----- 1 syslog adm 0 jún 23 14:04 /var/log/syslog
# logger "this message should end up in syslog"
# ls -al /var/log/syslog
-rw-r----- 1 syslog adm 0 jún 23 14:04 /var/log/syslog
Permissions of /var
and /var/log
:
# ls -al /var
drwxr-xr-x 14 root root 4096 dec 16 2015 .
drwxr-xr-x 24 root root 4096 máj 31 14:14 ..
...
drw-rw---- 22 root syslog 4096 jún 23 14:05 log
I'm on ubuntu 14.04
logger "this message should end up in syslog"
. Then see if that gets logged.rsyslog
running? What doessudo service rsyslog status
say?rsyslog start/running, process 513