On Wed, Aug 26, 2015 at 9:20 AM, Rainer Gerhards <[email protected]> wrote: > 2015-08-26 11:05 GMT+02:00 C. L. Martinez <[email protected]>: >> On Wed, Aug 26, 2015 at 7:12 AM, Rainer Gerhards >> <[email protected]> wrote: >>> There were numerous changes to imfile. I suggest to go to the >>> currently supported 8.12.0. If the problem persists, we can look into >>> it. >>> >>> Rainer >>> >> >> Ok, returning to the original problem. Problem persists and now I am >> loosing messages. >> >> I have attached output from rsyslogd -dn > > unfortunately this is only the startup due to some other instance > running (see at the bottom of the log). The startup looks fine, > though. >
Yes, it is correct. Conflicts with the default rsyslog on this system. But I have disabled it, and the problem is the same: I loose logs and from "suricata" tag, never sends logs ... _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

