Re: [CentOS] rsyslog does not log on a separate partition/FS mounted on /var/log/

2014-08-07 Thread Arun Khan
SOLVED On Wed, Aug 6, 2014 at 10:28 PM, James A. Peltier jpelt...@sfu.ca wrote: - Original Message - | On Wed, Aug 06, 2014 at 04:50:41PM +, Tony Mountifield wrote: | | Probably rsyslog is being started before /var/log is mounted, and | so it | is opening files within

Re: [CentOS] rsyslog does not log on a separate partition/FS mounted on /var/log/

2014-08-07 Thread Daniel J Walsh
On 08/07/2014 05:48 AM, Arun Khan wrote: SOLVED On Wed, Aug 6, 2014 at 10:28 PM, James A. Peltier jpelt...@sfu.ca wrote: - Original Message - | On Wed, Aug 06, 2014 at 04:50:41PM +, Tony Mountifield wrote: | | Probably rsyslog is being started before /var/log is mounted, and

[CentOS] rsyslog does not log on a separate partition/FS mounted on /var/log/

2014-08-06 Thread Arun Khan
The system is an AWS Instance based on a community CentOS 6.4 AMI snapshot. The vdisk is as follows as shown below [1] The root LVM contains /var/log/ I have attached another block device with ext4 FS. I copied the files from /var/log to this device (mounted on /mnt) and then changed /etc/fstab

Re: [CentOS] rsyslog does not log on a separate partition/FS mounted on /var/log/

2014-08-06 Thread Tony Mountifield
In article cahhm8gd+hfduyy7uah3kx2h37ca5fdbbwtjwyckv9tp3_4n...@mail.gmail.com, Arun Khan knu...@gmail.com wrote: The system is an AWS Instance based on a community CentOS 6.4 AMI snapshot. The vdisk is as follows as shown below [1] The root LVM contains /var/log/ I have attached another

Re: [CentOS] rsyslog does not log on a separate partition/FS mounted on /var/log/

2014-08-06 Thread John R. Dennison
On Wed, Aug 06, 2014 at 04:50:41PM +, Tony Mountifield wrote: Probably rsyslog is being started before /var/log is mounted, and so it is opening files within /var/log on the root device. rsyslog should start after local mounts are finished. I suspect it's selinux; /var/log should have a

Re: [CentOS] rsyslog does not log on a separate partition/FS mounted on /var/log/

2014-08-06 Thread James A. Peltier
- Original Message - | On Wed, Aug 06, 2014 at 04:50:41PM +, Tony Mountifield wrote: | | Probably rsyslog is being started before /var/log is mounted, and | so it | is opening files within /var/log on the root device. | | rsyslog should start after local mounts are finished. | |

Re: [CentOS] rsyslog does not log on a separate partition/FS mounted on /var/log/

2014-08-06 Thread Tony Mountifield
In article 20140806165735.gd10...@frodo.gerdesas.com, John R. Dennison j...@gerdesas.com wrote: On Wed, Aug 06, 2014 at 04:50:41PM +, Tony Mountifield wrote: Probably rsyslog is being started before /var/log is mounted, and so it is opening files within /var/log on the root device.

Re: [CentOS] rsyslog does not log on a separate partition/FS mounted on /var/log/

2014-08-06 Thread Keith Keller
On 2014-08-06, John R. Dennison j...@gerdesas.com wrote: On Wed, Aug 06, 2014 at 04:50:41PM +, Tony Mountifield wrote: Probably rsyslog is being started before /var/log is mounted, and so it is opening files within /var/log on the root device. rsyslog should start after local mounts are

Re: [CentOS] rsyslog does not log on a separate partition/FS mounted on /var/log/

2014-08-06 Thread John R. Dennison
On Wed, Aug 06, 2014 at 10:20:38AM -0700, Keith Keller wrote: It certainly can't hurt to check both cases: make sure rsyslog is starting after the proper filesystem with /var/log is mounted, and check the selinux contexts to make sure they're correct. rsyslog is started with a start priority