Issued was caused by SELinux. I didn't realize SELinux is enforcing on the affected hosts.
Compiling rules into SELinux policy stops the error and resumes log forwarding. -----Original Message----- From: David Lang <[email protected]> Sent: Thursday, March 7, 2019 7:49 PM To: Heaton, Tobias via rsyslog <[email protected]> Cc: Heaton, Tobias <[email protected]> Subject: Re: [rsyslog] imfile Permission Error v8.1903.0 Caution - External Email;;; ******************************************************************************************************************************************** nobody else has reported it, can you post your config? David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
