Submit a ticketCall us

Systems Monitoring for Dummies
Our new eBook will teach you the fundamentals and help you create monitors and alerts that are effective, meaningful, and actionable. Monitoring is more than a checkbox on your to-do list. This free eBook will give you practical advice to help you succeed in all aspects of monitoring – discovery, alerting, remediation, and troubleshooting. Don’t miss out on this indispensable resource for newbies, experienced IT pros, and everyone in between. Register Now.

Home > Success Center > Log & Event Manager (LEM) > The syslog file is empty, logs show 0 kb, but data is sent to LEM

The syslog file is empty, logs show 0 kb, but data is sent to LEM

Updated December 7, 2017

Overview

The particular log in LEM has not rotated. This means you are seeing, for example, a user.log with 0 bytes. Also, the user.log.1 has not compressed and contains incoming data. Subsequently, the connectors are pointing at user.log and see no current data.  

Environment

  • LEM 6.3.1

Cause 

High frequency logging to non local0-7 log files may break their rotation. This means the default log shows 0 kb after the rotation occurs.

Resolution

  1. Edit the syslog service on the device to log to any syslog local[0-7].log facility, as they deal with high frequency logging.
  2. Contact SolarWinds Support if this does not resolve the issue.
 

 

Last modified

Tags

Classifications

Public