Hi, I got the debug log, it was too big to be sent via the list (but I got it as list admin). I see that you drop privileges to the user "syslog". This probably explains what happens. I think the file is created before you drop privileges, but can then no longer be written when running in the new security context. Could you verify that the user "syslog" can access this file? Also, could you temporarily remove the Privilege drop?
Thanks, Rainer > -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Rainer Gerhards > Sent: Tuesday, September 08, 2009 9:55 AM > To: rsyslog-users > Subject: Re: [rsyslog] Could not open dynamic file ... - discarding > message > > can you provide a debug log? > > > -----Original Message----- > > From: [email protected] [mailto:rsyslog- > > [email protected]] On Behalf Of Henry > > Sent: Tuesday, September 08, 2009 9:04 AM > > To: rsyslog-users > > Subject: Re: [rsyslog] Could not open dynamic file ... - discarding > > message > > > > Hello! > > > > Tried it with various log locations (e.g. /tmp/my.log), neither > worked. > > Is this worth ab bug? > > > > -- > > kind regards, Henry > > > > On Fr, 2009-09-04 at 21:25 +0200, Henry wrote: > > > Hi! > > > > > > This puzzels me: This is my tcprecieve config file for rsyslog v4 > on > > > ubuntu: > > > > > > -----8<----- > > > $ModLoad imtcp > > > $InputTCPServerRun 514 > > > > > > # some dynamic templates > > > $template DYNlocal1,"/var/log/remote/%HOSTNAME%/local1.log" > > > > > > # log remote local1 to dynamic diretory > > > if $fromhost-ip != '127.0.0.1' and \ > > > $syslogfacility-text == 'local1' \ > > > then -?DYNlocal1 > > > ----->8----- > > > > > > I created /var/log/remote with sufficient privileges. > > > > > > Unfortunately this doesn't work. rsyslog crates a folder named > after > > the > > > remote host (myhostname) and creates the file local1.log (again: > > > sufficient permissions: syslog:syslog 640). But it doesn't write to > > that > > > file, but logs the error: > > > > > > -----8<----- > > > Could not open dynamic file '/var/log/remote/myhostname/local1.log' > - > > > discarding message > > > ----->8----- > > > > > > As you might guess my question is: Why isn't rsyslog able to open a > > file > > > it is able to create? Any help or hint is really appreciated. > > > > > > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
