LOGTOOL is quite easy to use - refer to the manual ;-)
:SYSDIAG
DUI >LOGTOOL
LOGTOOL>HELP LIST
Syntax:
LIST LOG=<log list> | FILES=<file list>
[;OUTFILE=<file name>]
[;TYPE=<type list>]
[;<field label>=<data list>]
[;DATE]
[;TIME]
[;WIDE]
[;HEXDUMP]
The LIST command allows the user to generate a report which will
display the contents of system log files. The user can use the LIST
command to display all of the records contained in system log files,
or can specify which individual log records are to be displayed using
various command options. The report from the LIST command may be sent
to a file, line printer, or to the terminal (default).
In order for a log record to be included in the report, it must match
all of the selection criteria specified. The user can define the selection
criteria by using the TYPE keyword, DATE or TIME options, or field
label keywords.
TYPE keyword: The TYPE keyword can be used to indicate that only log
records of the types specified are to be displayed. The LOGTOOL
command TYPES can be used to obtain a list of the log record types
available.
DATE or TIME options: The DATE or TIME options can be used to indicate
that only the log records generated between the date and time
entered are to be displayed.
Field Label Keywords:
Field label keywords allow the user to select log records based
on the data present in the log record. Whenever the LIST command
displays a data item from a log record, a field label is
shown before the data item to identify what the item represents.
This field label is usually a text abbreviation. Field label
keywords allow the user to use this text abbreviation as a
selection keyword. For example, if the user wishes to see all
log records with a field label of "LDEV" and a logged data
value of 1, the parameter of "LDEV=1" can be entered as part of
the LIST command.
If no selection criteria is given, all log records found will be included
in the report. After all the selected log records have been
displayed, this report will be terminated with a summary indicating
the number of log records selected. Please note that if LOGTOOL cannot
find a record definition for a log record type, the entire log record
will be displayed in HEX.
To execute this command, the user must posses at least diagnostic
security level 1.
LOG=<log list> - The LOG keyword specifies which log files to
base the report on. Use the STATUS
command to obtain a list of the system log files
available on the host system.
<log list> ::= <log number range> | <log number range> , <log list>
<log number range> ::= <log number> | <log number>/<log number>
<log number> ::= integer value
Ex: LOG=100/105, 150
FILES=<file list> - The FILES keyword is optionally used in place
of the LOG keyword. The file list must be a
list of "work" files (created by the SELECT
command). Note: All "work" files are created
in the diagnostic directory (DIAG.SYS on MPE/iX,
/usr/sbin/diag on HP-UX).
<file list> ::= <file name> | <file name> , <file list>
<file name> ::= Alpha-numeric text (starting with an alpha)
Ex: FILE=file1,file8,junk,work
OUTFILE=<file name> - The OUTFILE keyword lets the user direct the
report to a file or the line printer.
Note: All files created by using the OUTFILE
parameter will reside in the diagnostic directory
(DIAG.SYS on MPE/iX, /usr/sbin/diag on HP-UX).
<file name> ::= Alpha-numeric text (starting with an alpha) |
LP
Ex: OUTFILE=listfile or
OUTFILE=lp {Output to printer}
TYPE=<type list> - The TYPE keyword is used to specify which log
record types (id's) to select for the report.
Log record Id's range from 0 to 255. If this
TYPE is not used, all log record types will be
considered.
<type list> ::= <type number range> | <type number range>,<type
list>
<type number range> ::= <type number>
<type number> ::= integer value
Ex: TYPE=101,104,106
<field label>=<data list> - Field label keywords allow the user to
select log records based on the data present
in the log record. Quotes are only required
for field labels and data items which contain
embedded blanks or reserved words used as
part of the LIST command syntax. If a quote
is needed as part of the field label, entering
a quote twice ("") will be interpreted as a
single quote as part of the field label. For
fields
which are always displayed as hex arrays or can be
displayed as hex arrays by using the HEXDUMP
option,
the index construct will allow users to select
log
records by individual array elements. To use the
index construct, the field label must be followed
by the array element index number enclosed in
square
brackets. Please note that all arrays start with
an element index of 1. The selection criteria
specified by a field label keyword will only be
met if the data item and the data found in the log
record match exactly. All field labels and text
data items will be upshifted before the evaluation
is performed.
<field label> ::= text | "text" | text[<index>] | "text"[<index>]
<index> ::= integer value starting at 1
<data list> ::= <data item> | <data item> , <data list>
<data item> ::= integer value | text | "text"
Ex: Ldev=1,7 "PRODUCT NAME"=HP7935 JSNAME=JREPORT
"Hardware status"[1]=4
DATE - The DATE option will cause the user to be
prompted for a range of dates. Only those log
records falling into one of the specified date
ranges will be included in the report. Default
is the current day.
Ex: Enter the starting date [01/01/86] ? 02/02/86
Enter the ending date [<starting date>]? 02/03/86
Do you have more dates (Y/N) [N] ? n
TIME - The TIME option will cause the user to be
prompted for a range of times. Only those log
records falling into one of the specified time
ranges will be included in the report.
Default is the current time.
Ex: Enter the starting time [12:47 PM]? 1:00 PM
Enter the ending time [<starting time>]? 5:00 PM
Do you have more to enter (Y/N) [N] ? n
WIDE - The WIDE option is used when the output is
directed to a device which has 120 or more
columns. If the output device is LP, this
option is automatically set.
HEXDUMP - The HEXDUMP option is applicable only for I/O,
some disk maintenance track records, and
diagnostic records. If used, the hardware
status, disk error log, and diagnostic error
stack is dumped in HEX rather than being
decoded into text statements.
LOGTOOL>
****** end of help ******
To find a logfile, type STATUS, and you will see all existing logfiles on
disk (accessed one with a *).
TYPES shows you the existing log types you can search for (;DETAIL shows a
lot of more information!).
The logging itself is configured in SYSGEN, log, show.
We use MPEX to see the console log entries (we always perform a SWITCHLOG
before ... sometimes logging will become disabled by using MPEX' feature
VEAUDIT LISTLOG CONSOLE.
Hope that will help, Andreas Schmidt, CSC
bwalker @ CAPCOLLEGE.BC.CA
09/25/97 01:25 AM
Please respond to [log in to unmask]
To: HP3000-L @ RAVEN.UTC.EDU
cc: (bcc: Andreas Schmidt/HI/CSC)
Subject: System log query
Looking for some help analyzing a system log file problem.
Normally we change the system log file once on day.
One day(Sept 10), we spun through 8 log files in 1/2 hour.
I've looked at these logs with ALFRED. Doesn't show anything out of
the ordinary. Haven't figured out how to use LOGTOOL yet.
Any ideas as to how to dig deeper?
TIA, Bob.
[partial hexdump of log file - sequence shown here seems to repeat over and
over]
3488 30 00 00 00 60 00 00 00-2E 00 00 00 00 00 00 00
0...`...........
3504 00 00 4D 50 45 58 4C 5F-53 59 53 54 45 4D 5F 56
..MPEXL_SYSTEM_V
3520 4F 4C 55 4D 45 5F 53 45-54 20 20 20 20 20 20 20 OLUME_SET
3536 20 20 20 44 BA 82 0E 24-15 08 90 7B 90 3A 00 00
D...$...{.:..
3552 00 01 00 00 00 03 05 5D-00 01 20 8E 91 58 00 00 .......]..
..X..
3568 18 BA 41 03 24 70 03 22-79 A1 05 5D 00 01 20 8E ..A.$p."y..]..
.
3584 91 58 00 00 18 BA 41 03-24 70 03 22 79 A1 00 00
.X....A.$p."y...
3600 08 10 00 11 D7 B8 05 5D-00 01 20 8E 91 58 00 00 .......]..
..X..
3616 00 B2 00 00 00 90 00 00-00 00 00 00 00 FF 00 00
................
3632 00 20 00 00 00 DC 00 00-01 24 00 00 00 04 00 00 .
.......$......
3648 0C B6 05 5D 00 01 20 8E-91 58 00 01 41 C2 6B 83 ...]..
..X..A.k.
3664 04 D5 03 07 5A 7E 00 00-00 01 00 00 00 00 05 5D
....Z~.........]
3680 00 01 20 8E 91 58 00 01-35 C2 6B 83 00 B9 03 03 ..
..X..5.k.....
3696 9A FD 00 4D 45 4D 42 45-52 31 20 20 20 20 20 20 ...MEMBER1
3712 20 20 20 00 00 00 05 5D-00 01 20 8E 91 58 00 00 ....]..
..X..
3728 00 00 00 00 00 00 01 00-00 00 00 00 00 00 00 00
................
3744 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 C2
................
3760 EF 0E 27 32 03 70 00 00-00 10 73 74 61 72 74 20 ..'2.p....start
3776 6E 6F 72 65 63 6F 76 65-72 79 20 6E 6F 73 79 73 norecovery
nosys
3792 73 74 61 72 74 07 0E 1C-38 70 E0 C0 81 03 07 0E
start...8p......
3808 1C 38 70 E0 C0 81 03 07-0E 1C 38 70 E0 C0 81 03
.8p.......8p....
3824 07 0E 1C 38 70 E0 C0 81-03 07 0E 1C 38 70 E0 C0
...8p.......8p..
3840 81 03 07 0E 1C 38 70 E0-C0 81 03 07 0E 1C 38 70
.....8p.......8p
3856 E0 C0 81 03 07 0E 1C 38-70 E0 C0 81 03 07 0E 1C
.......8p.......
3872 38 70 E0 C0 81 03 07 0E-1C 38 70 E0 C0 81 03 07
8p.......8p.....
3888 0E 1C 38 70 E0 C0 81 03-07 0E 1C 38 70 E0 C0 81
..8p.......8p...
3904 03 07 0E 1C 38 70 E0 C0-81 03 07 0E 1C 38 70 E0
....8p.......8p.
3920 C0 81 03 07 0E 1C 38 70-E0 C0 81 03 07 0E 00 00
......8p........
3936 00 06 43 4F 4E 46 49 47-38 70 E0 C0 81 03 07 0E
..CONFIG8p......
3952 1C 38 70 E0 C0 81 03 07-0E 1C 38 70 E0 C0 81 03
.8p.......8p....
3968 07 0E 1C 38 70 E0 C0 81-03 07 0E 1C 38 70 E0 C0
...8p.......8p..
3984 81 03 07 0E 1C 38 70 E0-C0 81 03 07 0E 1C 38 70
.....8p.......8p
--=--=--
Bob Walker, Computer Centre -- [log in to unmask]
Capilano College, North Vancouver, BC, CANADA.
------
'There are over 600 books on the millennium(so far).
110 of them spell it wrong.'
|