View Issue Details

IDProjectCategoryView StatusLast Update
0015565CentOS-7rsyslogpublic2018-12-10 15:50
Status newResolutionopen 
Product Version 
Target VersionFixed in Version 
Summary0015565: imfile and symlinks not working
DescriptionWith the Centos 7.6 the rsyslog (8.24.0-34) is having problems with imfile and symbolic links.
With a configuration over a symlink the following error is in the message log:
rsyslogd[742]: imfile: '/var/www/logs' is FILE but DIRECTORY expected - ignored [v8.24.0-34.el7]

The message is repeated every 10 seconds and spamming the log.
Forwarding is also not always working.
Steps To ReproduceTo repoduce the bug:

1) Install Centos 7.6 with the current rsyslog (rsyslog-8.24.0-34.el7.x86_64)

2) Create a symlink:
ln -s /var/log /root/log

3) Create a imfile listener with the following content:
$ModLoad imfile
$InputFileName /root/log/messages
$InputFileTag message-log
$InputFileStateFile state-message-log
$InputFileSeverity notice
$InputFileFacility local3
local3.* @syslog.test.domain:514
& stop

4) Restart the rsyslog and look in the log:
systemctl restart rsyslog; sleep 5; journalctl -n 30 -f -u rsyslog.service
(rsyslogd[112640]: imfile: '/root/log' is FILE but DIRECTORY expected - ignored [v8.24.0-34.el7])

5) Change the $InputFileName to /var/log/messages and it is working.
So every symlink in the path breaks the imfile reader.
Tags7.6, rsyslog syslog


There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2018-12-10 15:47 gerald.prock New Issue
2018-12-10 15:47 gerald.prock Tag Attached: 7.6
2018-12-10 15:47 gerald.prock Tag Attached: rsyslog syslog