2015-08-26 11:36 GMT+02:00 C. L. Martinez <[email protected]>: > On Wed, Aug 26, 2015 at 9:20 AM, Rainer Gerhards > <[email protected]> wrote: >> 2015-08-26 11:05 GMT+02:00 C. L. Martinez <[email protected]>: >>> On Wed, Aug 26, 2015 at 7:12 AM, Rainer Gerhards >>> <[email protected]> wrote: >>>> There were numerous changes to imfile. I suggest to go to the >>>> currently supported 8.12.0. If the problem persists, we can look into >>>> it. >>>> >>>> Rainer >>>> >>> >>> Ok, returning to the original problem. Problem persists and now I am >>> loosing messages. >>> >>> I have attached output from rsyslogd -dn >> >> unfortunately this is only the startup due to some other instance >> running (see at the bottom of the log). The startup looks fine, >> though. >> > > Yes, it is correct. Conflicts with the default rsyslog on this system. > But I have disabled it, and the problem is the same: I loose logs and > from "suricata" tag, never sends logs ...
Can you provide a debug log from such a run? Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
