[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: repeated entries in /var/log/messages...

On Thu, 2004-07-29 at 14:11, Mario Flores wrote:
> Hi:
> Since day 1 I installed debian, I see the following in the 
> /var/log/messages:
> Jul 28 21:01:08 woody -- MARK --
> Jul 28 21:21:08 woody -- MARK --
> Jul 28 21:41:08 woody -- MARK --
> and they repeat every single hour at the exact same intervals. Does 
> anyone know what they mean and how can I stop them?

They are there so that you can be sure the syslogd daemon is still
running. Without these, if syslogd failed you wouldn't be able to tell
from the log files. And as syslogd is often part of the security
infrastructure of a server, that's not good. I believe syslogd can also
log to remote servers, so these mark messages would be extra-useful

man syslogd for more info, particularly the -m option.

syslogd is started by /etc/init.d/sysklogd (note the k). So you can edit
this file to pass whatever -m option you want; zero disables these

The /var/log/messages file is automatically archived, so I don't see why
you would want to disable the mark messages.



Reply to: