deleted files in /var/log by mistake .... how to get logs ?

Hi Nicolas,

 

 

The cleanest and easiest solution would probably be to wait for a maintenance window, fail over to the peer unit and then run a bigstart restart or just reboot the unit with the deleted log files.

 

 

You could potentially try to recreate the files, but I'm not sure how guaranteed or easy of a fix that would be. Here is an article which describes how to restore the deleted files:

 

 

Bring back deleted files with lsof

 

http://www.linux.com/archive/articles/58142

 

 

Aaron

Thanks Aaron,

 

 

You 're right, I would wait a maintenance windows but quite impossible right now before xmas... anyway, by restarting the syslog-ng daemon, logging seems working now and ltm is growing. I think system is working now but I deleted valuable scripts in that directory...oh my god..these bloody rm -f command...

 

 

I will look at your link for deleted files, may be I could put some files alive !

 

Thanks for your quick answer,

 

 

Regards

Restarting syslog-ng actually makes good sense and is a safe daemon to restart. Thanks for clarifying.

 

 

Ideally, you'd have scripts in a directory which is saved in a UCS. This ensures you have a complete backup of the configuration. You can specify custom directories to add to a UCS following the steps in SOL4422:

 

 

SOL4422: Viewing and modifying the files that are configured for inclusion in a UCS archive

 

https://support.f5.com/kb/en-us/solutions/public/4000/400/sol4422.html

 

 

Aaron