Hi all,

I have recently built to introduce Observium into my business. 
I can see Syslog entries running  "tail -f /var/log/syslog"

as soon as i enter config into /etc/rsyslog.d/30-observium.conf like from 
https://docs.observium.org/syslog/ and follow the 8.X instructions i get  

from an auto install version
2024-10-10T13:49:02.462169+01:00 Observium rsyslogd: action 'action-8-omprog' 
resumed (module 'omprog') [v8.2312.0 try https://www.rsyslog.com/e/2359 ]
2024-10-10T13:49:02.469290+01:00 Observium rsyslogd: omprog: failed to execute 
program '/opt/observium/syslog.php': Permission denied
2024-10-10T13:49:02.470590+01:00 Observium rsyslogd: child process (pid 565567) 
exited with status 1 [v8.2312.0]
2024-10-10T13:49:02.470763+01:00 Observium rsyslogd: omprog: program 
'/opt/observium/syslog.php' (pid 565567) terminated; will be restarted 
[v8.2312.0 try https://www.rsyslog.com/e/2119 ]
2024-10-10T13:49:02.470894+01:00 Observium rsyslogd: action 'action-8-omprog' 
suspended (module 'omprog'), retry 0. There should be messages before this one 
giving the reason for suspension. [v8.2312.0 try https://www.rsyslog.com/e/2007 
]
2024-10-10T13:49:03.476197+01:00 Observium rsyslogd: action 'action-8-omprog' 
resumed (module 'omprog') [v8.2312.0 try https://www.rsyslog.com/e/2359 ]
2024-10-10T13:49:03.485802+01:00 Observium rsyslogd: omprog: failed to execute 
program '/opt/observium/syslog.php': Permission denied
2024-10-10T13:49:03.486960+01:00 Observium rsyslogd: child process (pid 565568) 
exited with status 1 [v8.2312.0]
2024-10-10T13:49:03.487106+01:00 Observium rsyslogd: omprog: program 
'/opt/observium/syslog.php' (pid 565568) terminated; will be restarted 
[v8.2312.0 try https://www.rsyslog.com/e/2119 ]
2024-10-10T13:49:03.487173+01:00 Observium rsyslogd: action 'action-8-omprog' 
suspended (module 'omprog'), retry 0. There should be messages before this one 
giving the reason for suspension. [v8.2312.0 try https://www.rsyslog.com/e/2007 
]
2024-10-10T13:49:04.495956+01:00 Observium rsyslogd: action 'action-8-omprog' 
resumed (module 'omprog') [v8.2312.0 try https://www.rsyslog.com/e/2359 ]
2024-10-10T13:49:04.503258+01:00 Observium rsyslogd: omprog: failed to execute 
program '/opt/observium/syslog.php': Permission denied
2024-10-10T13:49:04.503510+01:00 Observium rsyslogd: omprog: program 
'/opt/observium/syslog.php' (pid 565569) terminated; will be restarted 
[v8.2312.0 try https://www.rsyslog.com/e/2119 ]
2024-10-10T13:49:04.503658+01:00 Observium rsyslogd: child process (pid 565569) 
exited with status 1 [v8.2312.0]
2024-10-10T13:49:04.513839+01:00 Observium rsyslogd: action 'action-8-omprog' 
suspended (module 'omprog'), retry 0. There should be messages before this one 
giving the reason for suspension. [v8.2312.0 try https://www.rsyslog.com/e/2007 
]
2024-10-10T13:49:05.519132+01:00 Observium rsyslogd: action 'action-8-omprog' 
resumed (module 'omprog') [v8.2312.0 try https://www.rsyslog.com/e/2359 ]
2024-10-10T13:49:05.526462+01:00 Observium rsyslogd: omprog: failed to execute 
program '/opt/observium/syslog.php': Permission denied
2024-10-10T13:49:05.527605+01:00 Observium rsyslogd: child process (pid 565571) 
exited with status 1 [v8.2312.0]
2024-10-10T13:49:05.527715+01:00 Observium rsyslogd: omprog: program 
'/opt/observium/syslog.php' (pid 565571) terminated; will be restarted 
[v8.2312.0 try https://www.rsyslog.com/e/2119 ]
2024-10-10T13:49:05.527812+01:00 Observium rsyslogd: action 'action-8-omprog' 
suspended (module 'omprog'), retry 0. There should be messages before this one 
giving the reason for suspension. [v8.2312.0 try https://www.rsyslog.com/e/2007 
]
2024-10-10T13:49:06.533091+01:00 Observium rsyslogd: action 'action-8-omprog' 
resumed (module 'omprog') [v8.2312.0 try https://www.rsyslog.com/e/2359 ]


from a manual install
2024-10-10T12:48:21.195520+00:00 observium2 rsyslogd: action 'action-2-omprog' 
resumed (module 'omprog') [v8.2312.0 try https://www.rsyslog.com/e/2359 ]
2024-10-10T12:48:21.203242+00:00 observium2 rsyslogd: omprog: failed to execute 
program '/opt/observium/syslog.php': Permission denied
2024-10-10T12:48:21.203529+00:00 observium2 kernel: audit: type=1400 
audit(1728564501.202:847): apparmor="DENIED" operation="exec" class="file" 
profile="rsyslogd" name="/opt/observium/syslog.php" pid=3214 
comm=72733A6D61696E20513A526567 requested_mask="x" denied_mask="x" fsuid=103 
ouid=1000
2024-10-10T12:48:21.203871+00:00 observium2 rsyslogd: child process (pid 3214) 
exited with status 1 [v8.2312.0]
2024-10-10T12:48:21.208108+00:00 observium2 rsyslogd: omprog: program 
'/opt/observium/syslog.php' (pid 3214) terminated; will be restarted [v8.2312.0 
try https://www.rsyslog.com/e/2119 ]
2024-10-10T12:48:21.208234+00:00 observium2 rsyslogd: action 'action-2-omprog' 
suspended (module 'omprog'), retry 0. There should be messages before this one 
giving the reason for suspension. [v8.2312.0 try https://www.rsyslog.com/e/2007 
]
2024-10-10T12:48:22.213298+00:00 observium2 rsyslogd: action 'action-2-omprog' 
resumed (module 'omprog') [v8.2312.0 try https://www.rsyslog.com/e/2359 ]
2024-10-10T12:48:22.220546+00:00 observium2 kernel: audit: type=1400 
audit(1728564502.219:848): apparmor="DENIED" operation="exec" class="file" 
profile="rsyslogd" name="/opt/observium/syslog.php" pid=3215 
comm=72733A6D61696E20513A526567 requested_mask="x" denied_mask="x" fsuid=103 
ouid=1000
2024-10-10T12:48:22.220765+00:00 observium2 rsyslogd: omprog: failed to execute 
program '/opt/observium/syslog.php': Permission denied
2024-10-10T12:48:22.221161+00:00 observium2 rsyslogd: child process (pid 3215) 
exited with status 1 [v8.2312.0]
2024-10-10T12:48:22.275077+00:00 observium2 rsyslogd: omprog: program 
'/opt/observium/syslog.php' (pid 3215) terminated; will be restarted [v8.2312.0 
try https://www.rsyslog.com/e/2119 ]
2024-10-10T12:48:22.275233+00:00 observium2 rsyslogd: action 'action-2-omprog' 
suspended (module 'omprog'), retry 0. There should be messages before this one 
giving the reason for suspension. [v8.2312.0 try https://www.rsyslog.com/e/2007 
]
2024-10-10T12:48:23.279060+00:00 observium2 rsyslogd: action 'action-2-omprog' 
resumed (module 'omprog') [v8.2312.0 try https://www.rsyslog.com/e/2359 ]
2024-10-10T12:48:23.287555+00:00 observium2 rsyslogd: omprog: failed to execute 
program '/opt/observium/syslog.php': Permission denied
2024-10-10T12:48:23.287798+00:00 observium2 kernel: audit: type=1400 
audit(1728564503.286:849): apparmor="DENIED" operation="exec" class="file" 
profile="rsyslogd" name="/opt/observium/syslog.php" pid=3217 
comm=72733A6D61696E20513A526567 requested_mask="x" denied_mask="x" fsuid=103 
ouid=1000
2024-10-10T12:48:23.288399+00:00 observium2 rsyslogd: child process (pid 3217) 
exited with status 1 [v8.2312.0]
2024-10-10T12:48:23.292012+00:00 observium2 rsyslogd: omprog: program 
'/opt/observium/syslog.php' (pid 3217) terminated; will be restarted [v8.2312.0 
try https://www.rsyslog.com/e/2119 ]
2024-10-10T12:48:23.292140+00:00 observium2 rsyslogd: action 'action-2-omprog' 
suspended (module 'omprog'), retry 0. There should be messages before this one 
giving the reason for suspension. [v8.2312.0 try https://www.rsyslog.com/e/2007 
]
2024-10-10T12:48:24.296075+00:00 observium2 rsyslogd: action 'action-2-omprog' 
resumed (module 'omprog') [v8.2312.0 try https://www.rsyslog.com/e/2359 ]
2024-10-10T12:48:24.304221+00:00 observium2 rsyslogd: omprog: failed to execute 
program '/opt/observium/syslog.php': Permission denied
2024-10-10T12:48:24.304648+00:00 observium2 kernel: audit: type=1400 
audit(1728564504.302:850): apparmor="DENIED" operation="exec" class="file" 
profile="rsyslogd" name="/opt/observium/syslog.php" pid=3218 
comm=72733A6D61696E20513A526567 requested_mask="x" denied_mask="x" fsuid=103 
ouid=1000
2024-10-10T12:48:24.305192+00:00 observium2 rsyslogd: child process (pid 3218) 
exited with status 1 [v8.2312.0]

i have checked permisions 
-rwxrwxr-x   1 user     user      3376 Feb 22  2024 syslog.php

any assistance would be gratefully received
_______________________________________________
observium mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to