Syslog file created when running the UNIX_Syslog Knowledge Script grows continuously and can cause d (NETIQKB54294)

  • 7754294
  • 02-Feb-2007
  • 17-Oct-2007


AppManager 6.0.2

AppManager for Unix 6.2

UNIX_Syslog Knowledge Script

Red Hat Linux

SuSE Linux

Sun Solaris




UNIX_Syslog accumulates filehandles on busy servers.


Syslog file created when running the UNIX_Syslog Knowledge Script grows continuously and can cause disk usage problems.


When the UNIX_Syslog KS is used, it creates a seperate "syslog" in the $NQMAGT_HOME/log directory.  This file continues to grow until the agent is stopped using the nqmdaemon script.  It is possible and likely that the users may run the UNIX Agent for a long period of time before stopping it.  As a result, the agent syslog file can grow to a very large size.  The situation can cause disk usage problem, and inefficiency in reading new messages.


This hotfix is recommended for all users running the AppManager UNIX agent version 6.0.2 with AppManager version 6.0.2 on all UNIX platforms. This hotfix updates the file.

Known Limitations

  1. Be aware of the following known limitations as you run the AppManager UNIX agent version 6.0.2:
  2. Before restarting the syslog process or the UNIX agent, you must either move the old syslog files from the $NQMAGT_HOME/log directory to some other location or delete them.
  3. If the syslog process is running, you should not attempt to delete the syslog or syslog.(n) file (where n = 1, 2, 3....6) in the $NQMAGT_HOME/log directory.
  4. The two threshold conditions applicable for writing into the syslog file are 1 MB or 72 hours, whichever is earlier. If the syslog file reaches either of these threshold limits, it is deleted and a new syslog file, syslog.(n), is created (where n = 1, 2, 3....6).

To install the hotfix:

  1. Download the installation package (AM602_UNIX_62_Hotfix54294.exe) located at:
  2. Extract the contents of the downloaded package (this ReadMe file and a tar file) to a specific folder. The default location is C:\Program Files\NetIQ.
  3. Log on to your UNIX computer with root privileges.
  4. Copy the AM602_UNIX_62_Hotfix54294.tar file from the folder, to your UNIX computer.
  5. In the directory where you copied the .tar file, enter the following command:
    • tar -xvf AM602_UNIX_62_Hotfix54294.tar
    • (This unpacks the files and into the current directory.)
  6. Run the shell script,, to apply the hotfix.

   Based on the OS, this script will deploy the appropriate or file for the platform.

Additional Information

Formerly known as NETIQKB54294