• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Issue no entry in /var/log/maillog, messages, secure, etc. (0 B)

JogoVogo

Basic Pleskian
Good evening, everyone,

We've only just realized that the files are no longer being written to...

Several attempts did not lead to success. Maybe someone here has an idea...

Product version: Plesk Obsidian 18.0.24.0
OS version: CentOS 7.7.1908 x86_64
Build date: 2020/02/15 00:00

What has been done so far:

# touch /usr/local/psa/var/log/maillog

# service rsyslog restart

# /etc/init.d/postfix restart

# tail -f /var/log/maillog (empty)

# cat /etc/rsyslog.conf
*.info;mail.none;authpriv.none;cron.none /var/log/messages

# The authpriv file has restricted access.
authpriv.* /var/log/secure

# Log all the mail messages in one place.
mail.* -/var/log/maillog

#service rsyslog status
Redirecting to /bin/systemctl status rsyslog.service
● rsyslog.service - System Logging Service
Loaded: loaded (/usr/lib/systemd/system/rsyslog.service; enabled; vendor preset: enabled)
Active: active (running) since Wed 2020-02-26 20:17:12 CET; 4min 49s ago
Docs: man:rsyslogd(8)
RSyslog Documentation - rsyslog
Main PID: 9565 (rsyslogd)
CGroup: /system.slice/rsyslog.service
└─9565 /usr/sbin/rsyslogd -n
 
The following helped me:

1. delete all files and folders of directory "/var/log/journal". Make sure you have not deleted the journal directory itself.

2. Now delete the imjournal state file. You can file the file at "/var/lib/rsyslog/imjournal.state". This file holds the state of rsyslog service for reading messages from journal directory.

3. Now restart the journal service using command "systemctl restart systemd-journald.service".

4. Now restart the rsyslog service using command "systemctl restart rsyslog.service".
 
i deleted maillog by mistake and it stopped recording.
ran these commands



# /etc/init.d/postfix restart
# service rsyslog restart <--

And it worked
 
I had same happened in Lightsail now. outgoing email work. Incoming email stopped. so no local email.
Its all connected to maillog which stopped updating.
 
I had same happened in Lightsail now. outgoing email work. Incoming email stopped. so no local email.
Its all connected to maillog which stopped updating.
I think its because i might have changed file user .
default is syslog:adm
i changed it to root:root and caused many problems
 
Back
Top