Information: Forum is in read-only mode
For details and other support options see https://www.adiscon.com/news/support-forum-set-to-read-only-mode/

Trouble installing on Ubuntu 15.10

Everything related with getting rsyslog up and running (but not beyond that point ;))

Moderator: alorbach

Google Ads


Trouble installing on Ubuntu 15.10

Postby richb-hanover » Thu Feb 11, 2016 4:20 pm

I had trouble with empty/non-updating log files on my Ubuntu 15.10 box. I ultimately realized that no syslogd/rsyslogd was running, so I tried to install Ubuntu's standard version via apt-get. I got the well-known message: "The user `syslog' is already a member of `adm'" with a hang.

Google led me to this site, where I decided to install from this PPA.

I now have a different error running apt-get install rsyslog. I had previously run sudo apt-get remove rsyslog and sudo apt-get purge rsyslog and also killed / removed all processes with 'rsyslog' in them. I've attached some output at the end of the message.

* First is the output from sudo apt-get install --reinstall rsyslog
* Next is output from journalctl -xe (it's empty)
* Next is a ps, showing rsyslogd is running
* Next is a syslog output, showing rsyslogd start messages, and a problem with /proc/kmsg
* Finally, ls -al /proc/kmsg

Any advice for getting this working? What other information could I provide? Many thanks!

Code: Select all
#
#
richb@netperf:~$ sudo apt-get install --reinstall rsyslog
Reading package lists... Done
Building dependency tree
Reading state information... Done
Suggested packages:
  rsyslog-mysql rsyslog-pgsql rsyslog-doc rsyslog-gssapi rsyslog-relp rsyslog-elasticsearch
  rsyslog-mmjsonparse rsyslog-imptcp apparmor
Recommended packages:
  logrotate
The following NEW packages will be installed:
  rsyslog
0 upgraded, 1 newly installed, 0 to remove and 3 not upgraded.
Need to get 0 B/636 kB of archives.
After this operation, 2,087 kB of additional disk space will be used.
Selecting previously unselected package rsyslog.
(Reading database ... 136805 files and directories currently installed.)
Preparing to unpack .../rsyslog_8.16.0-0adiscon1wily1_amd64.deb ...
Unpacking rsyslog (8.16.0-0adiscon1wily1) ...
Processing triggers for man-db (2.7.4-1) ...
Processing triggers for systemd (225-1ubuntu9) ...
Setting up rsyslog (8.16.0-0adiscon1wily1) ...

Creating config file /etc/rsyslog.d/50-default.conf with new version
update-rc.d: warning: start and stop actions are no longer supported; falling back to defaults
A dependency job for rsyslog.service failed. See 'journalctl -xe' for details.
invoke-rc.d: initscript rsyslog, action "start" failed.
dpkg: error processing package rsyslog (--configure):
 subprocess installed post-installation script returned error exit status 1
Processing triggers for systemd (225-1ubuntu9) ...
Errors were encountered while processing:
 rsyslog
E: Sub-process /usr/bin/dpkg returned an error code (1)

Code: Select all
richb@netperf:~$ journalctl -xe
No journal files were found.
-- No entries --

Code: Select all
richb@netperf:~$ ps ax | grep rsys
 2151 ?        Ssl    0:00 /usr/sbin/rsyslogd -n
 2190 pts/0    S+     0:00 grep --color=auto rsys

Code: Select all
richb@netperf:~$ sudo tail -f /var/log/syslog
...
Feb 11 09:47:02 netperf rsyslogd: [origin software="rsyslogd" swVersion="8.16.0" x-pid="2151" x-info="http://www.rsyslog.com"] start
Feb 11 09:47:02 netperf rsyslogd: rsyslogd's groupid changed to 109
Feb 11 09:47:02 netperf rsyslogd: rsyslogd's userid changed to 105
Feb 11 09:47:02 netperf rsyslogd: imklog: cannot open kernel log (/proc/kmsg): Operation not permitted.
...

Code: Select all
richb@netperf:~$ sudo ls -al /proc/kmsg
-r-------- 1 root root 0 Feb 11 09:47 /proc/kmsg
richb-hanover
New
 
Posts: 5
Joined: Thu Feb 11, 2016 3:56 pm

Urgent Question?

  • Pulling out your Hair?
  • Wasting Time and Money?
  • Deadline Approaching?

Re: Trouble installing on Ubuntu 15.10

Postby dlang » Thu Feb 11, 2016 9:59 pm

welcome to the world of systemd. Ubuntu 15.10 is the first release to switch to systemd, and systemd has it's own way of logging, which interferes with traditional syslog

Which PPA are you installing from (there are multiple ones available), what version are you trying to install?

it sounds like systemd is doing something that is blocking rsyslog from installing, but I haven't fought this fight yet, so I don't know what we have to do to systemd (or possibly the rsyslog.conf file) to avoid this problem
dlang
Frequent Poster
 
Posts: 1002
Joined: Mon Sep 15, 2008 7:44 am

Re: Trouble installing on Ubuntu 15.10

Postby richb-hanover » Thu Feb 11, 2016 10:19 pm

I'm not quite sure how to tell you which PPA I was using. Does any of this provide the info you wanted? Thanks!

I used the following to add the adiscon repository:
Code: Select all
sudo add-apt-repository ppa:adiscon/v8-stable

dpkg --list says:
Code: Select all
...
iF  rsyslog           8.16.0-0adiscon1wily1  amd64    a rocket-fast system for log processing
...

A bit of massaging of apt-cache output gives:
Code: Select all
rsyslog      http://ppa.launchpad.net/adiscon/v8-stable/ubuntu/              wily/main
richb-hanover
New
 
Posts: 5
Joined: Thu Feb 11, 2016 3:56 pm

[Solved] Re: Trouble installing on Ubuntu 15.10

Postby richb-hanover » Thu Jun 02, 2016 12:56 pm

I found a solution to my problem. (The initial problem was that my /var/log/* files weren't being updated, so I needed some kind of working syslog facility.)

The fix was to install syslog-ng (sudo apt-get install syslog-ng) and everything started working immediately.
richb-hanover
New
 
Posts: 5
Joined: Thu Feb 11, 2016 3:56 pm

Re: Trouble installing on Ubuntu 15.10

Postby dlang » Thu Jun 02, 2016 6:46 pm

installing syslog-ng is hardly the solution to getting rsyslog to work :-)

but good luck to you going forward.
dlang
Frequent Poster
 
Posts: 1002
Joined: Mon Sep 15, 2008 7:44 am

Google Ads



Return to Installation

Who is online

Users browsing this forum: No registered users and 0 guests

cron