Just by using the right commands, rsyslog will not know where to get the functionality code from. Status in "rsyslog" package in Ubuntu: New Bug description: Binary package hint: rsyslog My package: ii rsyslog 4.6.4-2ubuntu4 The thing is that when starting rsyslog first drop privileges and then tries Kevin Pattison (kevpatts) wrote on 2012-07-10: #8 This worked for me also, port 1025. A couple of precisions: The logic to edit the port number should be in a postinst, not a migration script (this is not an upgrade issue) That logic should have a Source
Due to a bug in rsyslog, privs are dropped before the ports are bound. Ryan Niklas Edmundsson (niklas-edmundsson) on 2012-10-11 tags: added: precise RedShift (redshift-gmx) wrote on 2013-02-26: #13 Can't quite believe it, centralized logging on standard 514 is not possible while not running as I'm definitely looking into that over either changing the port or running as root (which I'd like to avoid if at all possible).
Note that the server port address specified in $InputTCPServerRun must match the port address that the clients send messages to. Do it right at the top. It seems to me that our only option here is to use a different port number for rsyslog on Ubuntu (and possibly other OSes if they start using the same approach...), This is possible, since the configs are read via CFEngine, so will still be updated even if no reports are ever received.
But right now it is running on port 514 . Then we specify the templates for creating files. I tried something like: sucap bulb bulb execcap cap_net_bind_service=eip rsyslogd but I was getting: Caps: =ep cap_setpcap-ep sucaps: capsetp: Operation not permitted sucap: child did not exit cleanly. other Things to think about First of all, we will determine, which way of syslog reception we want to use.
is this a wrong solution and if it is ok why don't change the port until the bug fixed in rsyslog? Usually we would put the listener commands on top of the configuration right after the modules. Yes, I am an agent of Satan, but my duties are largely > (_ \ / _) ceremonial. > | > | dave [at] fly > _______________________________________________ > rsyslog mailing list Status:ReleasedPriority:3Assignee:Nicolas PERRONCategory:Initial promises & sys techTarget version:2.4.0~beta5Start date:2012-08-03Due date:% Done:100% Pull Request:Reproduced:NoHow to reproduce:Found in version(s): Description This is on rudder server running on ubuntu server 12.04.
c.) listen on a port > 1024 d.) pay upstream for 2 weeks work to get the fix done correctly.  http://git.adiscon.com/?p=rsyslog.git;a=commitdiff;h=d19806431653e6575a002ab4 Ryan Kather (rkather) wrote on 2012-08-17: #12 Scott, Thank https://www.rudder-project.org/redmine/issues/2768 Any opinions on this from the dev team? Contact Gossamer Threads Web Applications & Managed Hosting Powered by Gossamer Threads Inc. It seems to be a problem relating to binding the TCP port later after it has already dropped permissions.
We hope this wi ...COMMUNITYMailinglist Forum Wiki Github About Contact Us Rainer's Blog Related ProductsLogAnalyzer WinSyslog http://jessriegel.com/could-not/listener-could-not-resolve-service-name-given-in-connect.html Bind() fails because it happens after privilege > drop. > > -- > .-. .-. If you need both syslog server types configured, please make sure they run on proper ports. share|improve this answer answered Nov 21 '12 at 9:50 amorfis 3221627 This implies that for whatever reason, the daemon isn't starting as root, and so can't bind a port
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] More information about the foundations-bugs mailing list current community blog chat Server Fault Meta Server Fault How does ssh run a command? This imply that the port could be modified easily and not automatically. #9 Updated by François ARMAND over 4 years ago After a discussion with Nicolas P., it seems that the http://jessriegel.com/could-not/could-not-create-tcp-listener-ignoring-port-514-ubuntu.html This is an unfortunate bug...
Star 0 Fork 0 robinsmidsrod/gist:4095831 Created Nov 17, 2012 Embed What would you like to do? The main reason is, that UDP might suffer of message loss. Embed Share Copy sharable URL for this gist.
THCTLO (thctlo) wrote on 2013-03-05: #14 This problem is still here.. For 2/, we believe that the simplest and more futur-proof solution is to simply have a property in Rudder configuration.properties file for that port, defaulted to default Rsyslog port, and with GOOD WORK !! It seems to me that our only option here is to use a different port number for rsyslog on Ubuntu (and possibly other OSes if they start using the same approach...),
Wasting Time and Money? Next message: [Bug 789174] Re: rsyslog fails to create tcp socket. The rulesets are somewhat interesting to look at. http://jessriegel.com/could-not/listener-could-not-resolve-the-service-name.html Already have an account?