System log missing data beyond today

[rexbinary]

Hi all,

I checked my system log (messages) today and there is nothing available further back from 6:30am my time. This is not normal. There is usually much more data available. At least a few days worth.

There is plenty of disk space, but I believe the system log is actually logged to memory? I have 2.5GB of memory left, so good there. Uptime is 18 days so it hasn't restarted or lost power.

How should I go about troubleshooting this issue?

[frollic]

you know it's a round robin buffer, right ?

[efahl]

Check your log size, it's in kilobytes, default is 128.

$ ps w | grep logd
 1815 logd      2040 S    /sbin/logd -S 512

$ cat /etc/config/system

config system
...
        option log_size '512'

If you change the config, then you'll need to /etc/init.d/log restart...

[rexbinary]

Yes. It normally holds much more data what it's displaying. Many days' worth, not one.

[rexbinary]

root@OpenWrt:~# ps w | grep logd
  557 logd      2064 S    /sbin/logd -S 128
 8573 root      1336 S    grep logd
root@OpenWrt:~# cat /etc/config/system

config system
        option hostname 'OpenWrt'
        option timezone 'CST6CDT,M3.2.0,M11.1.0'
        option ttylogin '0'
        option log_size '128'
        option urandom_seed '0'
        option zonename 'America/Chicago'
        option log_proto 'udp'
        option conloglevel '8'
        option cronloglevel '5'
        option log_file '/var/log/messages'
        option log_remote '0'

config timeserver 'ntp'
        list server '0.openwrt.pool.ntp.org'
        list server '1.openwrt.pool.ntp.org'
        list server '2.openwrt.pool.ntp.org'
        list server '3.openwrt.pool.ntp.org'
        option enable_server '1'
        option interface 'lan'

config led 'led_wan'
        option name 'WAN'
        option sysfs 'green:wan'
        option trigger 'netdev'
        option mode 'link tx rx'
        option dev 'eth0'

config led 'led_lan'
        option name 'LAN'
        option sysfs 'green:lan'
        option trigger 'netdev'
        option mode 'link tx rx'
        option dev 'eth1'

It is at default as it should be as I have never changed it.

[rexbinary]

I figured it out. My ISP is now only providing 15 minute leases instead of 30 minute leases. That's add much more traffic to my logs. I'll increase the log size to compensate.

Thank you @frollic and @efhal for your feedback!

[frollic]

good work.

there was a thread about the same thing recently, I think they managed to get the DHCP renewal notifications out of the system log ...