I Ubuntu 18.04.4 LTS.
Der er et spam problem med rsyslog ver 8.32.0-1 Som har denne fejl.
Den skriver disse linjer mange gange i syslog filen. Og da ikke kan lide spam i log filer. Ville jeg gøre noget ved det.
May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ] May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ]
Det skyldes en config settings som du kan rette. Åben rsyslog.conf og udkommentere disse linjer som vist her. Og derefter genstart rsyslog.
$ vi /etc/rsyslog.conf # # Set the default permissions for all log files. # #$FileOwner syslog #$FileGroup adm #$FileCreateMode 0640 #$DirCreateMode 0755 #$Umask 0022 #$PrivDropToUser syslog #$PrivDropToGroup syslog
$ service rsyslog restart.
Og problemet er fixet.
