search for: imuxsock

Hi folks, I have installed rsyslog and rsyslog-mysql from the base repository, but the loadable module "imuxsocks" seems not to be part of these packages. Does this have a certain reason? And is there any other way to get this module besides compiling rsyslog on my own? Any hint or help is appreciated. Dirk

...to uxsock and imjournal: # rsyslog configuration file # For more information see /usr/share/doc/rsyslog-*/rsyslog_conf.html # If you experience problems, see http://www.rsyslog.com/doc/troubleshoot.html #### MODULES #### # The imjournal module bellow is now used as a message source instead of imuxsock. $ModLoad imuxsock # provides support for local system logging (e.g. via logger command) $ModLoad imjournal # provides access to the systemd journal #$ModLoad imklog # reads kernel messages (the same are read from journald) #$ModLoad immark # provides --MARK-- message capability

...bleshoot abrt's only a few times a day, but we're getting 10000s of setroubleshoot messages in /var/log/messages a day. e.g. Dec 2 10:03:55 server audispd: queue is full - dropping event Dec 2 10:04:00 server audispd: last message repeated 199 times Dec 2 10:04:00 server rsyslogd-2177: imuxsock begins to drop messages from pid 5967 due to rate-limiting Dec 2 10:04:01 server rsyslogd-2177: imuxsock lost 2 messages from pid 5967 due to rate-limiting Dec 2 10:04:01 server audispd: queue is full - dropping event Dec 2 10:04:02 server audispd: last message repeated 134 times Dec 2 10:04:02...

...000s of setroubleshoot messages in > > /var/log/messages a day. > > > > e.g. > > > > Dec 2 10:03:55 server audispd: queue is full - dropping event > > Dec 2 10:04:00 server audispd: last message repeated 199 times > > Dec 2 10:04:00 server rsyslogd-2177: imuxsock begins to drop messages > from > > pid 5967 due to rate-limiting > > Dec 2 10:04:01 server rsyslogd-2177: imuxsock lost 2 messages from pid > > 5967 due to rate-limiting > > Dec 2 10:04:01 server audispd: queue is full - dropping event > > Dec 2 10:04:02 server a...

Hello there, I installed a dc1 using debian jessie-packages strictly following the samba-manual "Setting up Samba as an Active Directory Domain Controller". I installed a dc2 using debian jessie-packages, also strictly following the manual for "Joining a Samba DC to an Existing Active Directory". It worked for a few weeks but then it quit working without having changed the

On 10/13/2015 02:59 PM, Jonathan Billings wrote: > On Tue, Oct 13, 2015 at 02:39:24PM +0000, C. L. Martinez wrote: >> Nop, because binary logs (using journalctl) are disabled in this host >> ... But under /var/log/messages, there is no error ... > > How did you disable journald? > Changing Storage's option under /etc/systemd/journald.conf to none.

...ry, rsyslog is listenning to uxsock and imjournal: Only one process can have a socket open at a time. Since journald holds /dev/log, rsyslog can't, which is why your cron log is empty. > #### MODULES #### > # The imjournal module bellow is now used as a message source instead > of imuxsock. > $ModLoad imuxsock # provides support for local system logging (e.g. > via logger command) > $ModLoad imjournal # provides access to the systemd journal There's no real point in using imjournal if journald isn't running.

...re is my /etc/rsyslog.conf: # rsyslog configuration file # For more information see /usr/share/doc/rsyslog-*/rsyslog_conf.html # If you experience problems, see http://www.rsyslog.com/doc/troubleshoot.html #### MODULES #### # The imjournal module bellow is now used as a message source instead of imuxsock. $ModLoad imuxsock # provides support for local system logging (e.g. via logger command) $OmitLocalLogging off $ModLoad imjournal # provides access to the systemd journal $ModLoad imklog # reads kernel messages (the same are read from journald) $ModLoad immark # provides --MARK-- message capabilit...

...r/log/messages a day. > >>> > >>> e.g. > >>> > >>> Dec 2 10:03:55 server audispd: queue is full - dropping event > >>> Dec 2 10:04:00 server audispd: last message repeated 199 times > >>> Dec 2 10:04:00 server rsyslogd-2177: imuxsock begins to drop messages > >> from > >>> pid 5967 due to rate-limiting > >>> Dec 2 10:04:01 server rsyslogd-2177: imuxsock lost 2 messages from pid > >>> 5967 due to rate-limiting > >>> Dec 2 10:04:01 server audispd: queue is full - dropping...

...uxsock and imjournal: > > Only one process can have a socket open at a time. Since journald holds > /dev/log, rsyslog can't, which is why your cron log is empty. > >> #### MODULES #### >> # The imjournal module bellow is now used as a message source instead >> of imuxsock. >> $ModLoad imuxsock # provides support for local system logging (e.g. >> via logger command) >> $ModLoad imjournal # provides access to the systemd journal > > There's no real point in using imjournal if journald isn't running. > Hi, First of all, sorry for...

...are running ? root at dc2:~# pstree systemd─┬─acpid ├─agetty ├─atd ├─cron ├─dbus-daemon ├─exim4 ├─named───4*[{named}] ├─ntpd ├─rpc.idmapd ├─rpc.statd ├─rpcbind ├─rsyslogd─┬─{in:imklog} │ ├─{in:imuxsock} │ └─{rs:main Q:Reg} ├─samba───smbd───smbd ├─samba───winbindd───winbindd ├─sshd───sshd───sshd───bash───su───bash───pstree ├─systemd-journal ├─systemd-logind └─systemd-udevd > What is in /etc/resolv.conf root at dc2:~# cat /etc...

...> day, but we're getting 10000s of setroubleshoot messages in > /var/log/messages a day. > > e.g. > > Dec 2 10:03:55 server audispd: queue is full - dropping event > Dec 2 10:04:00 server audispd: last message repeated 199 times > Dec 2 10:04:00 server rsyslogd-2177: imuxsock begins to drop messages from > pid 5967 due to rate-limiting > Dec 2 10:04:01 server rsyslogd-2177: imuxsock lost 2 messages from pid > 5967 due to rate-limiting > Dec 2 10:04:01 server audispd: queue is full - dropping event > Dec 2 10:04:02 server audispd: last message repeated...

...t messages in >>> /var/log/messages a day. >>> >>> e.g. >>> >>> Dec 2 10:03:55 server audispd: queue is full - dropping event >>> Dec 2 10:04:00 server audispd: last message repeated 199 times >>> Dec 2 10:04:00 server rsyslogd-2177: imuxsock begins to drop messages >> from >>> pid 5967 due to rate-limiting >>> Dec 2 10:04:01 server rsyslogd-2177: imuxsock lost 2 messages from pid >>> 5967 due to rate-limiting >>> Dec 2 10:04:01 server audispd: queue is full - dropping event >>> Dec...

Hi all, Somebody knows how can I bind rsyslogd to a specific ip adress?? I have two different interfaces on a centos5.5 host and I need to bind rsyslog to only one. Thanks. -- CL Martinez carlopmart {at} gmail {d0t} com

...cripts/logging.py @@ -0,0 +1,89 @@ +#!/usr/bin/python +# +# Configures the rsyslog daemon. + +import os +import sys +from ovirtfunctions import * + +RSYSLOG_FILE="/etc/rsyslog.conf" + +RSYSLOG_CONFIG_TEMPLATE = """ +#ovirt rsyslog config file + +#### MODULES #### +\$ModLoad imuxsock.so # provides support for local system logging (e.g. via logger command) +\$ModLoad imklog.so # provides kernel logging support (previously done by rklogd) + +#### GLOBAL DIRECTIVES #### +# Use default timestamp format +\$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat + +#### RULES...

We are currently running libxml2-2.7.6-14.el6_5.2.x86_64 How far back would you suggest we go? would libxml2-2.7.6-14.el6_5.1.x86_64 be sufficient -----Original Message----- From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On Behalf Of Daniel J Walsh Sent: 01 December 2014 15:10 To: CentOS mailing list Subject: Re: [CentOS] SEtroubleshootd Crashing I am not sure. I was

...[yet] on the Rsyslog Bugzilla [2]. But the following ticket [3] submitted this past April makes me wonder. Config Snippet: <config> #rsyslog v3 config file $PreserveFQDN on # if you experience problems, check # http://www.rsyslog.com/troubleshoot for assistance #### MODULES #### $ModLoad imuxsock.so # provides support for local system logging (e.g. via logger command) $ModLoad imklog.so # provides kernel logging support (previously done by rklogd) #$ModLoad immark.so # provides --MARK-- message capability # Provides UDP syslog reception #$ModLoad imudp.so #$UDPServerRun 514 #...

...-N1 looks good too as does rsyslogd -d -N1. Here is my rsyslog.conf. What am I doing wrong? # rsyslog configuration file # For more information see /usr/share/doc/rsyslog-*/rsyslog_conf.html # If you experience problems, see http://www.rsyslog.com/doc/troubleshoot.html #### MODULES #### $ModLoad imuxsock # provides support for local system logging (e.g. via logger command) $OmitLocalLogging off $ModLoad imjournal # provides access to the systemd journal $ModLoad imklog # reads kernel messages (the same are read from journald) # Provides RELP syslog reception $ModLoad imrelp $InputRELPServerRun 251...

...mbd[9628]: Privileges (0x 800000): Jun 13 09:52:06 dc1 smbd[9628]: Privilege[ 0]: SeChangeNotifyPrivilege Jun 13 09:52:06 dc1 smbd[9628]: Rights (0x 400): Jun 13 09:52:06 dc1 smbd[9628]: Right[ 0]: SeRemoteInteractiveLogonRight Jun 13 09:52:06 dc1 rsyslogd-2177: imuxsock begins to drop messages from pid 9628 due to rate-limiting >From what I can tell, samba isn't able to resolve S-1-1-0 which is "Everyone". I have copied idmap.ldb back over from another DC and restarted samba; all works now - but I'm sure that this should be created by samba...

...; $sysconfig_file +else + log "skipping rsyslog configuration, could not find find remote server" + exit 1 +fi + +cat > $rsyslog_main_config << EOF +#rsyslog v3 config file + +#### MODULES #### + +\$ModLoad omgssapi.so # provides gssapi remote logging over tcp +\$ModLoad imuxsock.so # provides support for local system logging (e.g. via logger command) +\$ModLoad imklog.so # provides kernel logging support (previously done by rklogd) + +\$GSSForwardServiceName rsyslog +\$GssMode encryption + +#### GLOBAL DIRECTIVES #### + +# Use default timestamp format +\$ActionFile...