On Thu, 12 May 2016, Thomas Lowry wrote:
Hello,
I am having an issue where I have two identical servers and a central log
server. We will call the identical servers "server1" and "server2" and the
log server "logserver". I have a custom log on both "server1" and "server2"
is picked up by Rsyslog to forward the messages to the "logserver". This
works fine on "server1", but not on "server2" which are configured exactly
the same way. Here are the configurations for these servers:
The custom configuration file for "server1" and "server2":
http://pastebin.com/raw/KxjWqbun
The rsyslog.conf for "server1" and "server2":
http://pastebin.com/raw/QWJUrLu7
And finally, here is my rsyslog.conf for the "logserver":
http://pastebin.com/raw/57eEF8BW
Is there something I have configured incorrectly? I have compared down to
the MD5 sums of each file and they are exactly the same. I am using RPM
version 5.8.10-8 of Rsyslog on a 64 bit CentOS 6.6.
The first thing I would check is the SELinux tags on all the directories and
files (ls -Z) if those are different it can make it so that you can't read the
file.
Just to be sure I understand your situation, normal logs from both files work,
it's the imfile section that works on one and not on the other, correct?
you can try starting rsyslog in debug mode (rsyslogd -dn) and see if the log
gives you any errors about that file/directory (it's a VERY detailed log, so
capture it to a file and look through it after a few min)
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
