As far as i know ubuntu makes rsyslog run as non-root, so the file permissions are probably insufficient. As a test, comment out the $ privdrop statements...
Sent from phone, thus brief. Am 12.07.2014 08:51 schrieb "Ouychai Chaita" <[email protected]>: > Dear, Everybody. > Thank you for you helpfull about Rsyslog. I have problems about log > template. Can't sending a log text to file. I'm using ubuntu server 12.04. > I'm config by below and attache configuration files. > > > $template > > DailyLogs,"/var/log/iptables/%$YEAR%/%$MONTH%/%$DAY%_%$MONTH%_%$YEAR%_iptables.log" > > $template > > SquidTemplate,"%$day%/%timegenerated:1:3:date-rfc3164%/%$year%,%timegenerated:12:23:date-rfc3339%,%HOSTNAME%,%syslogtag%,%msg%\n" > > $template > > SquidDailyLogs,"/var/log/squid/%$YEAR%/%$MONTH%/%$DAY%_%$MONTH%_%$YEAR%_squid.log" > > kern.=debug -/var/log/iptables/iptables.log > # kern.=debug -?Dailylog > > kern.*;kern.!=debug -/var/log/kern.log > > # local0.* -/var/log/squid/squid.log > > local0.* -?SquidDailyLogs;SquidTemplate > > > A squid log can sending without log template. I config the iptables log at > "/etc/rsyslog.d/70-iptables.conf". > > > Reguards > Ouychai Chaita > > President of Lanna Opensource Software Club > www.lanna-oss.org > (66) 08-7185-0920 > skype : ouychai_chaita > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
