Information: Forum is in read-only mode
For details and other support options see https://www.adiscon.com/news/support-forum-set-to-read-only-mode/

imrelp fails to load - rsyslog 8.33.1, RHEL 7.4

Everything related with getting rsyslog up and running (but not beyond that point ;))

Moderator: alorbach

Google Ads


imrelp fails to load - rsyslog 8.33.1, RHEL 7.4

Postby ezv » Mon Mar 12, 2018 4:13 pm

Hello.

After upgrading 8.24 to 8.33.1 (RPMs from rsyslog.com), I am experiencing the following undefined symbol problem with previously working configuration:

2018-03-12T14:17:35.159745+00:00 czdcd-syslog01.lx.ifortuna.cz rsyslogd: could not load module '/usr/lib64/rsyslog/imrelp.so', dlopen: /usr/lib64/rsyslog/imrelp.so: undefined symbol: relpSrvSetMaxDataSize [v8.33.1 try http://www.rsyslog.com/e/2066 ]

and as the result of the above

2018-03-12T14:17:35.159748+00:00 czdcd-syslog01.lx.ifortuna.cz rsyslogd: input module name 'imrelp' is unknown [v8.33.1 try http://www.rsyslog.com/e/2209 ]

and subsequently unknown parameter errors for various tls.* parameters, like

2018-03-12T14:17:35.159750+00:00 czdcd-syslog01.lx.ifortuna.cz rsyslogd: error during parsing file /etc/rsyslog.conf, on or before line 141: parameter 'tls.permittedpeer' not known -- typo in config file? [v8.33.1 try http://www.rsyslog.com/e/2207 ]

Because of the undefined symbol it is in my opinion a bug, not a configuration issue?

Thank you for your help with this issue,

Eduard Vopicka
ezv
New
 
Posts: 8
Joined: Mon Jan 18, 2016 2:04 pm

Urgent Question?

  • Pulling out your Hair?
  • Wasting Time and Money?
  • Deadline Approaching?

Re: imrelp fails to load - rsyslog 8.33.1, RHEL 7.4

Postby deoren » Mon Mar 12, 2018 4:17 pm

It sounds like you are missing the rsyslog-relp package. Try:

Code: Select all
yum install rsyslog-relp
service rsyslog restart
deoren
Avarage
 
Posts: 19
Joined: Wed Dec 13, 2017 6:49 am
Location: USA

Re: imrelp fails to load - rsyslog 8.33.1, RHEL 7.4

Postby ezv » Mon Mar 12, 2018 4:25 pm

Hi. Thanks for quick answer, but...:

[vopedu@ad.ifortuna.cz@czdcd-syslog01 12]$ rpm -qa |grep rsyslog
rsyslog-8.33.1-1.el7.centos.x86_64
rsyslog-relp-8.33.1-1.el7.centos.x86_64
rsyslog-gnutls-8.33.1-1.el7.centos.x86_64
[vopedu@ad.ifortuna.cz@czdcd-syslog01 12]$

And meanwhile no such problem with the same config file and 8.33.1 on RHEL6.
Last edited by ezv on Mon Mar 12, 2018 4:29 pm, edited 1 time in total.
ezv
New
 
Posts: 8
Joined: Mon Jan 18, 2016 2:04 pm

Re: imrelp fails to load - rsyslog 8.33.1, RHEL 7.4

Postby deoren » Mon Mar 12, 2018 4:28 pm

What module load statements have you defined?

Code: Select all
$ grep -i load /etc/rsyslog.conf


I'm using omrelp to forward from a RHEL7 system without issue, but haven't tried enabling imrelp there (our receivers run a different distro).
deoren
Avarage
 
Posts: 19
Joined: Wed Dec 13, 2017 6:49 am
Location: USA

Re: imrelp fails to load - rsyslog 8.33.1, RHEL 7.4

Postby ezv » Mon Mar 12, 2018 4:31 pm

[root@czdcd-syslog01 ~]# grep -i load /etc/rsyslog.conf
load="impstats"
load="imjournal"
load="imklog"
load="imuxsock"
load"immark"
load="imudp"
load="imtcp"
load="imrelp"
load="builtin:omfile"
load="ommysql.so"
[root@czdcd-syslog01 ~]#

And the config file has not been changed with rsyslog upgrade:
[root@czdcd-syslog01 ~]# ls -l /etc/rsyslog.conf
-rw-r--r-- 1 root root 18248 Dec 8 16:28 /etc/rsyslog.conf
[root@czdcd-syslog01 ~]#
ezv
New
 
Posts: 8
Joined: Mon Jan 18, 2016 2:04 pm

Re: imrelp fails to load - rsyslog 8.33.1, RHEL 7.4

Postby deoren » Mon Mar 12, 2018 4:33 pm

ezv wrote:[root@czdcd-syslog01 ~]# grep -i load /etc/rsyslog.conf
load="impstats"
load="imjournal"
load="imklog"
load="imuxsock"
load"immark"
load="imudp"
load="imtcp"
load="imrelp"
load="builtin:omfile"
load="ommysql.so"
[root@czdcd-syslog01 ~]#

And the config file has not been changed with rsyslog upgrade:
[root@czdcd-syslog01 ~]# ls -l /etc/rsyslog.conf
-rw-r--r-- 1 root root 18248 Dec 8 16:28 /etc/rsyslog.conf
[root@czdcd-syslog01 ~]#


Looks like you have an error in your configuration. Run this:

Code: Select all
sudo rsyslogd -N2


This in particular caught my eye:

load"immark"
deoren
Avarage
 
Posts: 19
Joined: Wed Dec 13, 2017 6:49 am
Location: USA

Re: imrelp fails to load - rsyslog 8.33.1, RHEL 7.4

Postby ezv » Mon Mar 12, 2018 4:39 pm

[root@czdcd-syslog01 ~]# rsyslogd -N2
rsyslogd: version 8.24.0, config validation run (level 2), master config /etc/rsyslog.conf
rsyslogd: debug log file is '/var/log/rsyslog-debug', fd 4 [v8.24.0 try http://www.rsyslog.com/e/0 ]
[root@czdcd-syslog01 ~]#

Yes, there is missing "=" on the immark line, but this is commented out in the config file. This is why config validation does not report problem.

/*
module (
load"immark"
# provides --MARK-- message capability
)
*/
ezv
New
 
Posts: 8
Joined: Mon Jan 18, 2016 2:04 pm

Re: imrelp fails to load - rsyslog 8.33.1, RHEL 7.4

Postby ezv » Mon Mar 12, 2018 4:47 pm

module (
load="imrelp"
# Provides the ability to receive syslog messages
# via the reliable RELP protocol.
)
input (
type="imrelp"
port="601"
tls="on"
tls.caCert="/etc/pki/rsyslog/rsyslog-ca-cert.pem"
tls.myCert="/etc/pki/rsyslog/rsyslog-service-cert.pem"
tls.myPrivKey="/etc/pki/rsyslog/rsyslog-service-key.pem"
tls.authMode="name"
tls.permittedpeer=["FORTUNA RSYSLOG SERVER"]
#KeepAlive="on"
#KeepAlive.Probes="2"
#KeepAlive.Time="30"
#KeepAlive.Interval="30"
#ruleset="relp"
)
ezv
New
 
Posts: 8
Joined: Mon Jan 18, 2016 2:04 pm

Re: imrelp fails to load - rsyslog 8.33.1, RHEL 7.4

Postby ezv » Mon Mar 12, 2018 5:22 pm

Found it! Thanks for your help!

The primary culprit is only partially updated rsyslog8 repo in RedHat Satellite, librelp then dit not get updated to 1.2.14 and stayed at 1.2.12. So I synced the repo manually, created and propagated all that content views, and now everything is OK after running yum update once again.

And the secondary culprit is probably too weak dependency of rsyslog on librelp, IMHO it would be NTH to have it fixed in the next release of rsyslog8.

[vopicka@czlx-vopicka tmp]$ rpm -qRp rsyslog-8.33.1-1.el7.centos.src.rpm |grep librelp
warning: rsyslog-8.33.1-1.el7.centos.src.rpm: Header V3 RSA/SHA1 Signature, key ID e00b8985: NOKEY
librelp-devel >= 1.2.12
[vopicka@czlx-vopicka tmp]$

and the rsyslog-relp binary .rpm:
[vopicka@czlx-vopicka RSYSLOG]$ rpm -qRp rsyslog-relp-8.33.1-1.el7.centos.x86_64.rpm|grep librelp
warning: rsyslog-relp-8.33.1-1.el7.centos.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID e00b8985: NOKEY
librelp >= 1.2.12
librelp.so.0()(64bit)
[vopicka@czlx-vopicka RSYSLOG]$


e.g. rsyslog compilation and rsyslof-relp-8.33.1 requires librelp-devel >= 1.2.12, but it appears that relpSrvSetMaxDataSize has been added in 1.2.14:

==============
2017/05/29
librelp 1.2.14
librelp 1.2.14 [download]
This new release of librelp provides an API extension: add relpSrvSetMaxDataSize().
For more details, please take a look at the changelog below.
Version 1.2.14 - 2017-05-29
- API extension: add relpSrvSetMaxDataSize()
Thanks to Nathan Brown for the patch.
===============
ezv
New
 
Posts: 8
Joined: Mon Jan 18, 2016 2:04 pm

Re: imrelp fails to load - rsyslog 8.33.1, RHEL 7.4

Postby deoren » Mon Mar 12, 2018 6:21 pm

ezv wrote:Found it! Thanks for your help!

The primary culprit is only partially updated rsyslog8 repo in RedHat Satellite, librelp then dit not get updated to 1.2.14 and stayed at 1.2.12. So I synced the repo manually, created and propagated all that content views, and now everything is OK after running yum update once again.

And the secondary culprit is probably too weak dependency of rsyslog on librelp, IMHO it would be NTH to have it fixed in the next release of rsyslog8.


Glad you got it figured out.

If you're up for opening a bug report, this is where you would do so for the CentOS/RHEL packages:

https://github.com/rsyslog/rsyslog-pkg- ... tos/issues
deoren
Avarage
 
Posts: 19
Joined: Wed Dec 13, 2017 6:49 am
Location: USA

Re: imrelp fails to load - rsyslog 8.33.1, RHEL 7.4

Postby ezv » Tue Mar 13, 2018 4:24 pm

OK, bugreport created. Thanks.
ezv
New
 
Posts: 8
Joined: Mon Jan 18, 2016 2:04 pm

Google Ads



Return to Installation

Who is online

Users browsing this forum: Majestic-12 [Bot] and 1 guest

cron