imkmsg.so module present in ubuntu base but not in ppa

General discussions here

Moderator: rgerhards

Google Ads


imkmsg.so module present in ubuntu base but not in ppa

Postby erikanderson753 » Fri Apr 21, 2017 10:53 pm

We are using rsyslog v8-stable PPA in our ubuntu trusty instances https://launchpad.net/~adiscon/+archive ... /v8-stable

I have been testing out getting messages from the kernel buffer and tried this solution https://askubuntu.com/questions/441748/where-are-upstart-log-messages-on-ubuntu-13-x/490900#490900 which basically consists of loading the `imklog` module and then modifying config to include this setting:
Code: Select all
$KLogPermitNonKernelFacility on

http://www.rsyslog.com/doc/v8-stable/configuration/modules/imklog.html

However when I enable that setting on a 14.04 box with rsyslog 8.26.0-0adiscon2trusty1 it indicates that it cannot enable this setting
Code: Select all
rsyslogd: command 'KLogPermitNonKernelFacility' is currently not permitted - did you already set it via a RainerScript command (v6+ config)? [v8.26.0 try http://www.rsyslog.com/e/2222 ]


My next thought was to use imkmsg http://www.rsyslog.com/doc/v8-stable/configuration/modules/imkmsg.html. However it appears that the module is not loaded with the ppa version of rsyslog
Code: Select all
rsyslogd: could not load module '/usr/lib/rsyslog/imkmsg.so', dlopen: /usr/lib/rsyslog/imkmsg.so: cannot open shared object file: No such file or directory  [v8.26.0 try http://www.rsyslog.com/e/2066 ]

Code: Select all
ls /usr/lib/rsyslog/imkmsg.so
ls: cannot access /usr/lib/rsyslog/imkmsg.so: No such file or directory


Two questions, which module for kernel logging should I be using and should the imkmsg module be included with the PPA version?
erikanderson753
New
 
Posts: 2
Joined: Fri Apr 21, 2017 10:40 pm

Urgent Question?

  • Pulling out your Hair?
  • Wasting Time and Money?
  • Deadline Approaching?

Re: imkmsg.so module present in ubuntu base but not in ppa

Postby erikanderson753 » Thu May 04, 2017 10:13 pm

The reason I was unable to load the imklog module with the `$KLogPermitNonKernelFacility on` param was that I was mixing old and new module syntax. So this works:
Code: Select all
$ModLoad imklog
$KLogPermitNonKernelFacility on


However the new syntax does not appear to work in pulling messages in:
Code: Select all
module(load="imklog" permitnonkernelfacility="on")


This appears to be caused by a bug within rsyslog:
https://github.com/rsyslog/rsyslog/issues/477
http://rsyslog-users.1305293.n2.nabble. ... .html#none
erikanderson753
New
 
Posts: 2
Joined: Fri Apr 21, 2017 10:40 pm

Google Ads



Return to General

Who is online

Users browsing this forum: No registered users and 1 guest

cron