You are attempting to troubleshoot an event that should have made an entry into the messages
log. This event happened about two weeks ago. Which file should you look at first?
A.
/var/adm/messages
B.
/var/adm/messages.0
C.
/var /adm/messagas.1
D.
/var/adm/messages.2
E.
/var/adm/messages.3
Explanation:
The /var/adm/messages is the file to which all the messages printed on the console
are logged to by the Operating System. This helps to track back check the console messages to
troubleshoot any issues on the system.
Syslog daemon also writes to this /var/adm/messages file.
The /var/adm/messages file monitored and managed by newsyslog and its configuration file is
/usr/lib/newsyslog.
This script runs as the roots cron job everyday, checks the /var/adm/messages file and
copies/moves it to /var/adm/messages.0,1,2,3,4,5,6,7. In other words, it does the Log Rotation for
the /var/adm/messages.
In an event the /var file system is running out of space, these files needs to checked and can be
removed (not the actual /var/adm/messages itself) to free up space on the file system.
However, care has to be taken, if you decide to empty the /var/adm/messages itself for any
reason. This process is called Truncation.
References: SOLARIS SYSTEM ADMIN TIPS, /var/adm/messages
C is the correct
two weeks ago
Answer should be B.
Messages logs are renamed approx every 10 days by the syslogd as per root crontab in /var/spool/cron/. The most current entries are in /var/adm/messages. Previous rotated log would /var/adm/messages.0. This would be the likely message file to hold an event from approx 2 weeks.
for ref http://docs.oracle.com/cd/E23824_01/html/821-1451/mgmssg-1.html
I agree with you John, answer should be ‘B’, the logs rotate every 10 days but surprisingly the answer is ‘A’ on the Exam. I think it might be one of those tricky questions, as the question asks “Which file should you look at first?” as a System Administrator, the best troubleshooting is to start with /var/adm/messages, even if you know the logs rotate every 10 days.
Estoy de acuerdo con Phumlani,
Suponiendo que la fecha actual es 6 de Julio
Suponiendo que los logs rotan el día 5 de Julio
========================================================================
16 junio 25 junio rotate messages.1 – aquí
26 junio 5 julio rotate messages.0
6 julio N/A Hoy messages
Suponiendo que la fecha actual es 6 de Julio
Suponiendo que los logs rotan el día 7 de Julio
========================================================================
18 junio 27 junio rotate messages.0 — aquí
28 junio 7 julio Today messages
No se conoce especificamente el messages.* ya que depende de la fecha en que rota el log.
Saludos
B
As John say
B is correct
C is correct:
the default
conditions for rotating a log file are: -s 1b -p 1w, which
means the log file is only rotated if the size is non-zero
and if at least 1 week has passed since the last time it was
rotated.
Reference: logadm(1M) and Oracle® Solaris Administration: Common Task (System Log Rotation)
Passed Solaris 11 Administration 1Z0-821 exam with a good score of 90% (the passing line is 64% now)!
Got 70 questions in total, and questions were on:
1. Installing Oracle Solaris 11 using an Interactive Installer
2. Administering Services
3. Setting Up and Administering Data Storage
4. Administering Oracle Solaris Zones
5. Setting Up and Administering User Accounts
6. Controlling Access to Systems and Files
(New) 7. Managing the SYSLOG facilityManaging the CRON facility
(New) 8. Managing the SYSLOG facility
Pay close attention to the up 7 & 8 topics when preparing for the 1Z0-821 exam. Questions on those two topics are not available on this site.
And, you can refer to the most valid 1Z0-821 dumps (2017 version) here:
http://www.oraclebraindump.com/?s=1Z0-821
(Those questions are part of PassLeader 1Z0-821 dumps, recommend to get its full version 1Z0-821 dumps with VCE and PDF.)
Good Luck!
What’s more, part of PassLeader 1Z0-822 dumps are also available here for your reference:
http://www.oraclebraindump.com/?s=1Z0-822
Best Regards!!!