Hi,
I tried to call logwatch manually like
"logwatch --detail high --debug high --service kernel"
but I do not get the OOM messages in the output.
Following lines DO exist in my journal
journalctl --since today | grep "Killed process"
Dez 15 15:16:39 homeserver.jaroschek.net kernel: Out of memory: Killed process 533 (mariadbd) total-vm:794956kB, anon-rss:2108kB, file-rss:0kB, shmem-rss:0kB, UID:972 pgtables:924kB oom_score_adj:0
Dez 15 15:16:43 homeserver.jaroschek.net kernel: Out of memory: Killed process 30543 (php-fpm) total-vm:440644kB, anon-rss:8276kB, file-rss:4kB, shmem-rss:0kB, UID:971 pgtables:576kB oom_score_adj:0
Dez 15 15:16:43 homeserver.jaroschek.net kernel: Out of memory: Killed process 30619 (php-fpm) total-vm:438400kB, anon-rss:3888kB, file-rss:0kB, shmem-rss:0kB, UID:971 pgtables:564kB oom_score_adj:0
Can anyone help, please?
Must have been a timing issue - today (10 hour later) when I run same command I get:
logwatch --service kernel
--------------------- Kernel Begin ------------------------
WARNING: Out of memory killer killed these executables
(sd-pam) : 1 Time(s)
mariadbd : 4 Time(s)
php-fpm : 12 Time(s)
systemd : 1 Time(s)
---------------------- Kernel End -------------------------
date -> Fr 16. Dez 08:10:32 CET 2022
the log entries are in the range: Dez 15 15:16:39 - Dez 15 15:18:52
any ideas why yesterday I got no results? Is it intended to report only the previous day?
The default value for the --range option in generally yesterday:
/usr/share/logwatch/default.conf/logwatch.conf:
Range = yesterday
You could add --range today to search today's logs.
On 12/16/22 00:13, Artur Jaroschek wrote:
--
Orion Poplawski
IT Systems Manager 720-772-5637
NWRA, Boulder/CoRA Office FAX: 303-415-9702
3380 Mitchell Lane orion@nwra.com
Boulder, CO 80301 https://www.nwra.com/
Related
Support Requests:
#7thank you so much for the help and please close this request.