Hele tider kommer der denne tekst i syslog på min server – rsyslogd: action ‘action 3’ resumed (module ‘builtin:omfile’)

I Ubuntu 18.04.4 LTS.

Der er et spam problem med rsyslog ver 8.32.0-1 Som har denne fejl.

Den skriver disse linjer mange gange i syslog filen. Og da ikke kan lide spam i log filer. Ville jeg gøre noget ved det.

May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ]
May 12 06:25:49 web01 rsyslogd: action 'action 1' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.32.0 try http://www.rsyslog.com/e/2007 ]

 

Det skyldes en config settings som du kan rette. Åben rsyslog.conf og udkommentere disse linjer som vist her. Og derefter genstart rsyslog.

$ vi /etc/rsyslog.conf

#
# Set the default permissions for all log files.
#
#$FileOwner syslog
#$FileGroup adm
#$FileCreateMode 0640
#$DirCreateMode 0755
#$Umask 0022
#$PrivDropToUser syslog
#$PrivDropToGroup syslog

$ service rsyslog restart.

Og problemet er fixet.

 

Author:

Jeg er en professionel system administrator og grundlægger af linuxboxen.dk Jeg er en ivrig Linux-elsker og open source-entusiast. Jeg bruger Ubuntu og tror på at dele viden. Bortset fra Linux, elsker musik og dyr. Jeg er en stor fan af Dire straits.

Skriv et svar