I would guess that journald interfere here... Can you check what the journal has?
Rainer El mié., 13 nov. 2019 a las 13:32, Matthias Wieloch via rsyslog (<[email protected]>) escribió: > > Hi, > > for my own kernel driver I want to log messages that use a facility > different from KERN and log them to a seperate file. The driver sends > log entries with printk_emit ( e.g. printk_emit(21, LOGLEVEL_ALERT, > NULL, 0, "Facility 21 Prio 1 Test\n"); ) and I see those messages print > out to console as well as dmesg (Facility 21 Prio 1 Test) and if I > shutdown rsyslogd I see the message in /proc/kmsg as well (<169>Facility > 21 Prio 1 Test) but the message won't show up in the configured logfile, > not even in /var/log/messages > > I'm already using "module(load="imklog" permitnonkernelfacility="on")" > to load the module and the rule I use to write the file is "local5.* > /var/log/kernel_driver.log" and for /var/log/messages it is > "*.info;mail.none;authpriv.none;cron.none;local5.none /var/log/messages". > > I feel I'm missing some crucial step because using the LOCAL* facilities > works as expected from userspace programs. > > Kindest regards > Matthias Wieloch > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
