Hello! Please read this: https://www.rsyslog.com/doc/master/configuration/modules/omfile.html
You can configure default values for the module as described in the document above: ``` module(load="builtin:omfile" ...parameters...) ``` On Tue, 2 Nov 2021 at 18:16, Milan Koudelka via rsyslog < [email protected]> wrote: > Hi, > I tried to switch some rsyslog configurations to advanced format to > fine-tune actions. > > Instead of > local1.* /mnt/log/gdc;RawMsg > > I wrote > local1.* action(type="omfile" file="/mnt/log/gdc" template="RawMsg" > ioBufferSize="128k" queue.size="50000" queue.type="linkedlist" > queue.filename="gdc") > > As recommended, I kept other configurations as they were, if I don't > need any advanced configuration. > > Eg. > *.info;mail.none;authpriv.none;cron.none /mnt/log/messages > > But, I also changed legacy setting of file group ownership > $FileGroup splunk > $FileCreateMode 0640 > $DirGroup splunk > $DirCreateMode 0650 > > And I've put that directly to module load > module(load="builtin:omfile" Template="RSYSLOG_TraditionalFileFormat" > fileGroup="splunk" FileCreateMode="0640" dirGroup="splunk" > DirCreateMode="0650") > > The problem is, only the files configured with advanced format are > created with the correct group owner. /mnt/log/messages is created > under root user. Do I need to add back the legacy setting and keep > both in-module and legacy setting? > > Milan Koudelka > Principal SW engineer > [email protected] > +420 776 313 414 > > Danube House > Karolinská 650/1 > 186 00 Prague 8, Czech Republic > Twitter | Facebook | LinkedIn | Blog > _______________________________________________ > rsyslog mailing list > https://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. -- Yury Bushmelev _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
