On Fri, 5 Feb 2016, chika tambun wrote:
Dear all,
Rsyslog won't send syslog to server on production mode, but it will do
transmit the syslog when i activated debug mode using 'rsyslogd -dn'
Yes, i did create the WorkDirectory
*[and]*
i can't find error message on the debug log because the server did received
the data transmitted according to my request. But when i switch back to non
debug mode 'service rsyslog restart' this message log appear & the server
wont receive anything
what happens if you run it from the command line without the -dn (as opposed to
letting init start it)
I've seen this sort of thing before when SELinux permissions didn't allow you to
access the workdir
do ls -lZ /var/spool /var/log
I'll bet that the SELinux tags on /var/spool/rsyslog aren't appropriate.
David Lang
# cat /var/log/messages
2016-02-05T10:51:25.952736+03:00 freeradius rsyslogd: [origin
software="rsyslogd" swVersion="8.15.0" x-pid="30558" x-info="
http://www.rsyslog.com";] exiting on signal 15.
2016-02-05T10:51:26.039020+03:00 freeradius rsyslogd: [origin
software="rsyslogd" swVersion="8.15.0" x-pid="30589" x-info="
http://www.rsyslog.com";] start
2016-02-05T10:51:26.039958+03:00 freeradius rsyslogd-2007: action 'action
9' suspended, next retry is Fri Feb 5 10:51:56 2016 [v8.15.0 try
http://www.rsyslog.com/e/2007 ]
2016-02-05T10:51:26.040045+03:00 freeradius rsyslogd-2007: action 'action
10' suspended, next retry is Fri Feb 5 10:51:56 2016 [v8.15.0 try
http://www.rsyslog.com/e/2007 ]
2016-02-05T10:51:26.043847+03:00 freeradius rsyslogd-2007: action 'action
0' suspended, next retry is Fri Feb 5 10:51:56 2016 [v8.15.0 try
http://www.rsyslog.com/e/2007 ]
2016-02-05T10:51:26.043978+03:00 freeradius rsyslogd-2007: action 'action
1' suspended, next retry is Fri Feb 5 10:51:56 2016 [v8.15.0 try
http://www.rsyslog.com/e/2007 ]
2016-02-05T10:52:41.596501+03:00 freeradius rsyslogd-2027: imfile: could
not persist state file imfile-state:-var-log-radius-radacct-detail - data
may be repeated on next startup. Is WorkDirectory set? [v8.15.0 try
http://www.rsyslog.com/e/2027 ]
2016-02-05T10:52:41.596612+03:00 freeradius rsyslogd-2027: imfile: could
not persist state file imfile-state:-var-log-radius-radius.log - data may
be repeated on next startup. Is WorkDirectory set? [v8.15.0 try
http://www.rsyslog.com/e/2027 ]
2016-02-05T10:52:41.596690+03:00 freeradius rsyslogd-2027: imfile: could
not persist state file imfile-state:-var-log-radius-radacct-reply-detail -
data may be repeated on next startup. Is WorkDirectory set? [v8.15.0 try
http://www.rsyslog.com/e/2027 ]
2016-02-05T10:52:41.596736+03:00 freeradius rsyslogd-2027: imfile: could
not persist state file imfile-state:-var-log-radius-radacct-auth-detail -
data may be repeated on next startup. Is WorkDirectory set? [v8.15.0 try
http://www.rsyslog.com/e/2027 ]
2016-02-05T10:52:41.596750+03:00 freeradius rsyslogd: [origin
software="rsyslogd" swVersion="8.15.0" x-pid="30589" x-info="
http://www.rsyslog.com";] exiting on signal 15.
2016-02-05T10:52:54.441600+03:00 freeradius rsyslogd: [origin
software="rsyslogd" swVersion="8.15.0" x-pid="30824" x-info="
http://www.rsyslog.com";] start
# cat /etc/rsyslog.conf
module(load="imuxsock")
module(load="imklog")
module(load="omrelp")
module(load="imfile" PollingInterval="12")
$RepeatedMsgReduction on
$FileOwner root
$FileGroup root
$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022
$PrivDropToUser root
$PrivDropToGroup root
$WorkDirectory /var/spool/rsyslog
$IncludeConfig /etc/rsyslog.d/*.conf
action(type="omrelp" target="10.10.10.5" port="15514")
action(type="omrelp" target="10.10.10.4" port="15514")
# rsyslogd -N 1
rsyslogd: version 8.15.0, config validation run (level 1), master config
/etc/rsyslog.conf
rsyslogd: End of config validation run. Bye.
# cat /etc/redhat-release
CentOS release 6.6 (Final)
# uname -a
Linux freeradius 2.6.32-431.el6.x86_64 #1 SMP Fri Nov 22 03:15:09 UTC 2013
x86_64 x86_64 x86_64 GNU/Linux
# rsyslogd -version
rsyslogd 8.15.0, compiled with:
PLATFORM: x86_64-redhat-linux-gnu
PLATFORM (lsb_release -d):
FEATURE_REGEXP: Yes
GSSAPI Kerberos 5 support: No
FEATURE_DEBUG (debug build, slow code): No
32bit Atomic operations supported: Yes
64bit Atomic operations supported: Yes
memory allocator: system default
Runtime Instrumentation (slow code): No
uuid support: Yes
Number of Bits in RainerScript integers: 64
See http://www.rsyslog.com for more information.
*Best regards,*
*chika.tambun*
*"Winning loves preparation"*
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
