View Issue Details

IDProjectCategoryView StatusLast Update
0015565CentOS-7rsyslogpublic2018-12-10 15:50
Reportergerald.prock 
PrioritynormalSeverityminorReproducibilityalways
Status newResolutionopen 
Product Version 
Target VersionFixed in Version 
Summary0015565: imfile and symlinks not working
DescriptionWith the Centos 7.6 the rsyslog (8.24.0-34) is having problems with imfile and symbolic links.
With a configuration over a symlink the following error is in the message log:
rsyslogd[742]: imfile: '/var/www/logs' is FILE but DIRECTORY expected - ignored [v8.24.0-34.el7]

The message is repeated every 10 seconds and spamming the log.
Forwarding is also not always working.
Steps To ReproduceTo repoduce the bug:

1) Install Centos 7.6 with the current rsyslog (rsyslog-8.24.0-34.el7.x86_64)

2) Create a symlink:
ln -s /var/log /root/log

3) Create a imfile listener with the following content:
$ModLoad imfile
$InputFileName /root/log/messages
$InputFileTag message-log
$InputFileStateFile state-message-log
$InputFileSeverity notice
$InputFileFacility local3
$InputRunFileMonitor
local3.* @syslog.test.domain:514
& stop

4) Restart the rsyslog and look in the log:
systemctl restart rsyslog; sleep 5; journalctl -n 30 -f -u rsyslog.service
...
(rsyslogd[112640]: imfile: '/root/log' is FILE but DIRECTORY expected - ignored [v8.24.0-34.el7])
...

5) Change the $InputFileName to /var/log/messages and it is working.
So every symlink in the path breaks the imfile reader.
Tags7.6, rsyslog syslog
abrt_hash
URL

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2018-12-10 15:47 gerald.prock New Issue
2018-12-10 15:47 gerald.prock Tag Attached: 7.6
2018-12-10 15:47 gerald.prock Tag Attached: rsyslog syslog