AIX - Logs/Trace

Commands

Logs

Display logs entities:

alog -L

Display system logs

alog -o -t {entity}
# Examples:
#   alog -o -t cfg (System logs)
#   alog -o -t console (Console logs)
#   alog -o -t boot (Boot logs)
#   alog -o -t lvmt (LVM logs)

Read system logs:

cat /var/adm/messages
# NOTE: Needs to be configured in syslog.conf

Clear logs:

echo "Log Cleared  - $(date)" | alog -t {entity}
# Ex: echo "Log Cleared  - $(date)" | alog -t cfg

Change system log verbosity:

export  CFGLOG=timestamp,detail,verbosity:9

Syslog

Config file:

/etc/syslog.conf

Add redirection (/etc/syslog.conf):

{facility}.{level} {path}
# Ex: auth.debug /tmp/sshd.log

Support

Create a snapshot for support:

snap -ac
# Output: /tmp/ibmsupt/snap.pax.Z
# NOTE: Rename snap with IBM case (Ex: TS00XXXX.snap.pax.Z)

Note

Rename snapshot with IBM case before send it.

Example:

mv snap.pax.Z TS00XXXX.snap.pax.Z

Procedures

Configure syslog for sshd

Configure syslog from sshd config:

# /etc/ssh/sshd_config
SyslogFacility AUTH
LogLevel INFO

Add redirection:

# /etc/syslog.conf
auth.debug /tmp/sshd.log

Refresh syslog daemon:

refresh -s syslogd

Restart ssh daemon:

stopsrc -s sshd; startsrc -s sshd