Re: [cobalt-users] /var/log/maillog file empty

[Larry Smith <lesmith@xxxxxxxxx>]

On Sunday 14 December 2003 15:17, Santiago Montalvan wrote:
> Larry,
>
> Thanks for your help.  This is what I have for Sendmail under syslogd:
>
> /var/log/maillog {
>     daily
>     prerotate
>         /usr/local/sbin/maillog2commonlog.pl sendmail < /var/log/maillog |
> \ /usr/local/sbin/split_logs mail
>     endscript
>     postrotate
>         /usr/bin/killall -HUP syslogd
>     endscript
> }
>
> Anything wrong with that?
>
> Restarting Sendmail did not fix the problem.
>
> Thanks,
>
> Santiago.

If restarting sendmail did not "fix" it (meaning the log data starts going to 
maillog vice maillog.1 - then there is a mail process or mailscanner or 
something running that has the inode of the "original"  (maillog now 
maillog.1 file) _open_ and it will not switch until "that" process either 
dies or lets go of the inode.

Stop sendmail, mailscanner and any such programs, then see (ps fax) if there 
are _any_ processes running such as mail or mailscanner.  If so kill them 
off, then restart and see what it does.  You may have a message "hung" 
somewhere in the system that is not getting delivered and is not letting the 
sendmail processes (all of them) die off and restart correctly.

-- 
Larry Smith
SysAd ECSIS.NET
sysad@xxxxxxxxx