over the years the distros have put more effort into minimizing the optional dependencies that get pulled in, so more of the rsyslog modules have become separate packages when they pull in other things.

it's nice when it's this easy to fix, but you also got a lesson in troubleshooting.

Have fun.

David Lang

 On Fri, 9 Jul 2021, Daniel Pocock via rsyslog wrote:

Date: Fri, 9 Jul 2021 12:36:43 +0200
From: Daniel Pocock via rsyslog <[email protected]>
To: rsyslog-users <[email protected]>
Cc: Daniel Pocock <[email protected]>
Subject: Re: [rsyslog] RHEL / CentOS 8.1 omelasticsearch JSON issues



On 09/07/2021 11:17, Rainer Gerhards wrote:
sry, I misunderstood the conversation. So on the machine with the old
version, it works, but on the new not. OK.

In this case, can you create a debug log on CentOS8 and post it?

https://www.rsyslog.com/doc/master/troubleshooting/debug.html


Thanks for the fast feedback, I found the root cause

Debian and Ubuntu have the mmjsonparse module in the main rsyslog
package so it just works.

CentOS users have to install an extra package,

 sudo dnf install rsyslog-mmjsonparse

rsyslogd[44038]: could not load module 'mmjsonparse', errors: trying to
load module /usr/lib64/rsyslog/mmjsonparse.so:
/usr/lib64/rsyslog/mmjsonparse.so: cannot open shared object file: No
such file or directory [v8.1911.0-7.el8_4.2 try
https://www.rsyslog.com/e/2066 ]



I installed the extra package and now the logging to OpenSearch (using
omelasticsearch) is working on the CentOS 8.1 host with rsyslog
8.1911.0-7.el8_4.2
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to