Hmm... a simple '-d' debug doesn't seem to give enough information, see attached rsyslogd.debug.full. Attached log starts with processing of the remote logging because the full log is too large for this list.
Note, that this was started with an empty /var/log/remote and the file /var/log/remote/myhostname/local1.log got created during debug run. rsysloghost='loghost', remotehost='remotehost'. Thanks for having a look at this, -- regards, Henry On Di, 2009-09-08 at 09:55 +0200, Rainer Gerhards wrote: > can you provide a debug log? > > > -----Original Message----- > > From: [email protected] [mailto:rsyslog- > > [email protected]] On Behalf Of Henry > > Sent: Tuesday, September 08, 2009 9:04 AM > > To: rsyslog-users > > Subject: Re: [rsyslog] Could not open dynamic file ... - discarding > > message > > > > Hello! > > > > Tried it with various log locations (e.g. /tmp/my.log), neither worked. > > Is this worth ab bug? > > > > -- > > kind regards, Henry > > > > On Fr, 2009-09-04 at 21:25 +0200, Henry wrote: > > > Hi! > > > > > > This puzzels me: This is my tcprecieve config file for rsyslog v4 on > > > ubuntu: > > > > > > -----8<----- > > > $ModLoad imtcp > > > $InputTCPServerRun 514 > > > > > > # some dynamic templates > > > $template DYNlocal1,"/var/log/remote/%HOSTNAME%/local1.log" > > > > > > # log remote local1 to dynamic diretory > > > if $fromhost-ip != '127.0.0.1' and \ > > > $syslogfacility-text == 'local1' \ > > > then -?DYNlocal1 > > > ----->8----- > > > > > > I created /var/log/remote with sufficient privileges. > > > > > > Unfortunately this doesn't work. rsyslog crates a folder named after > > the > > > remote host (myhostname) and creates the file local1.log (again: > > > sufficient permissions: syslog:syslog 640). But it doesn't write to > > that > > > file, but logs the error: > > > > > > -----8<----- > > > Could not open dynamic file '/var/log/remote/myhostname/local1.log' - > > > discarding message > > > ----->8----- > > > > > > As you might guess my question is: Why isn't rsyslog able to open a > > file > > > it is able to create? Any help or hint is really appreciated. > > > > > > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com
5054.727606022:main queue:Reg/w0: main queue:Reg/w0: worker IDLE, waiting for work. 5054.727609261:main thread: main queue: EnqueueMsg advised worker start 5054.727630769:imuxsock.c: --------imuxsock calling select, active file descriptors (max 3): 3 5054.727662249:imtcp.c: --------<NSDSEL_PTCP> calling select, active fds (max 4): 4 5054.727668059:main thread: initialization completed, transitioning to regular run mode 5056.400110663:imtcp.c: New connect on NSD 0x65a690. 5056.400240204:imtcp.c: --------<NSDSEL_PTCP> calling select, active fds (max 5): 4 5 5056.400255357:imtcp.c: netstream 0x683350 with new data 5056.400272148:imtcp.c: logmsg: flags 20, from 'remotehost', msg Sep 8 12:17:36 remotehost root: test by henry 5056.400274671:imtcp.c: Message has legacy syslog format. 5056.400279417:imtcp.c: main queue: entry added, size now 1 entries 5056.400282172:imtcp.c: wtpAdviseMaxWorkers signals busy 5056.400290169:imtcp.c: main queue: EnqueueMsg advised worker start 5056.400301360:imtcp.c: --------<NSDSEL_PTCP> calling select, active fds (max 5): 4 5 5056.400311400:main queue:Reg/w0: main queue: entry deleted, state 0, size now 0 entries 5056.400328690:main queue:Reg/w0: result of expression evaluation: 0 5056.400337430:main queue:Reg/w0: result of expression evaluation: 0 5056.400346474:main queue:Reg/w0: result of expression evaluation: 0 5056.400351644:main queue:Reg/w0: result of expression evaluation: 0 5056.400358215:main queue:Reg/w0: result of expression evaluation: 0 5056.400366212:main queue:Reg/w0: result of expression evaluation: 0 5056.400371208:main queue:Reg/w0: result of expression evaluation: 0 5056.400381921:main queue:Reg/w0: result of expression evaluation: 0 5056.400388679:main queue:Reg/w0: result of expression evaluation: 0 5056.400395611:main queue:Reg/w0: result of expression evaluation: 0 5056.400403792:main queue:Reg/w0: result of expression evaluation: 0 5056.400420697:main queue:Reg/w0: result of expression evaluation: 0 5056.400430773:main queue:Reg/w0: result of expression evaluation: 1 5056.400434138:main queue:Reg/w0: Called action, logging to builtin-file 5056.400440938:main queue:Reg/w0: (DYNlocal1) 5056.400507577:main queue:Reg/w0: Called LogError, msg: Could not open dynamic file '/var/log/remote/remotehost/local1.log' - discarding message 5056.400531156:main queue:Reg/w0: logmsg: flags 1, from 'loghost', msg Could not open dynamic file '/var/log/remote/remotehost/local1.log' - discarding message 5056.400537445:main queue:Reg/w0: Message has legacy syslog format. 5056.400540197:main queue:Reg/w0: main queue: entry added, size now 1 entries 5056.400542937:main queue:Reg/w0: wtpAdviseMaxWorkers signals busy 5056.400544844:main queue:Reg/w0: main queue: EnqueueMsg advised worker start 5056.400548374:main queue:Reg/w0: Removed entry 0 for file '[OPEN FAILED]' from dynaCache. 5056.400550633:main queue:Reg/w0: Action requested to be suspended, done that. 5056.400554546:main queue:Reg/w0: main queue: entry deleted, state 0, size now 0 entries 5056.400562730:main queue:Reg/w0: result of expression evaluation: 0 5056.400572312:main queue:Reg/w0: result of expression evaluation: 1 5056.400575746:main queue:Reg/w0: Called action, logging to builtin-file 5056.400580715:main queue:Reg/w0: (/var/log/syslog) 5056.400591557:main queue:Reg/w0: result of expression evaluation: 0 5056.400607572:main queue:Reg/w0: result of expression evaluation: 0 5056.400612225:main queue:Reg/w0: result of expression evaluation: 0 5056.400619969:main queue:Reg/w0: result of expression evaluation: 0 5056.400627299:main queue:Reg/w0: result of expression evaluation: 0 5056.400633371:main queue:Reg/w0: result of expression evaluation: 0 5056.400639122:main queue:Reg/w0: result of expression evaluation: 0 5056.400644767:main queue:Reg/w0: result of expression evaluation: 0 5056.400651994:main queue:Reg/w0: result of expression evaluation: 1 5056.400656433:main queue:Reg/w0: Called action, logging to builtin-file 5056.400668930:main queue:Reg/w0: (/var/log/debug) 5056.400687895:main queue:Reg/w0: result of expression evaluation: 0 5056.400702536:main queue:Reg/w0: result of expression evaluation: 0 5056.400705763:main queue:Reg/w0: main queue:Reg/w0: worker IDLE, waiting for work.
_______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
