Ubuntu
rsyslog package

  1. Bug #407862
  2. Comment #19

Comment 19 for bug 407862

Revision history for this message
Michael Terry (mterry) wrote : Re: [karmic] Messages not being sent to system logs

OK, so I finally got time to sit down and look at this, and I can't reproduce the problem (files that rsyslog can log stop being logged after reload).

I tested normal logs by:
 * tail -f /var/log/syslog
 * sudo chown root:root /var/log/lpr.log # (-rw-r----- 1 root root 776 2009-08-31 10:40 /var/log/lpr.log)
 * sudo /etc/init.d/rsyslog restart
 * sudo /etc/init.d/cups restart
 * sudo /etc/init.d/rsyslog reload
 * sudo /etc/init.d/cups reload

And in the tail output, I saw (cupsd.conf problem is something unrelated, just good output to test rsyslog with):

Aug 31 10:40:11 bongo rsyslogd: [origin software="rsyslogd" swVersion="4.2.0" x-pid="9805" x-info="http://www.rsyslog.com"] (re)start
Aug 31 10:40:11 bongo rsyslogd: rsyslogd's groupid changed to 103
Aug 31 10:40:11 bongo rsyslogd: rsyslogd's userid changed to 102
Aug 31 10:41:32 bongo cupsd: Unable to read configuration file '/etc/cups/cupsd.conf' - exiting!
Aug 31 10:41:37 bongo rsyslogd: [origin software="rsyslogd" swVersion="4.2.0" x-pid="9805" x-info="http://www.rsyslog.com"] rsyslogd was HUPed, type 'lightweight'.
Aug 31 10:41:39 bongo cupsd: Unable to read configuration file '/etc/cups/cupsd.conf' - exiting!

So that appears to be working! It could read it from the start, and it could still read it after a HUP.

Then I tested kern.log:
 * tail -f /var/log/syslog
 * sudo /etc/init.d/rsyslog restart
 * plug in a usb stick
 * sudo /etc/init.d/rsyslog reload
 * pull usb stick out

And I saw:
Aug 31 10:50:32 bongo rsyslogd: [origin software="rsyslogd" swVersion="4.2.0" x-pid="10300" x-info="http://www.rsyslog.com"] (re)start
Aug 31 10:50:32 bongo rsyslogd: rsyslogd's groupid changed to 103
Aug 31 10:50:32 bongo rsyslogd: rsyslogd's userid changed to 102
Aug 31 10:50:36 bongo kernel: [249915.148097] usb 2-2: new high speed USB device using ehci_hcd and address 40
...
Aug 31 10:50:49 bongo rsyslogd: [origin software="rsyslogd" swVersion="4.2.0" x-pid="10300" x-info="http://www.rsyslog.com"] rsyslogd was HUPed, type 'lightweight'.
Aug 31 10:50:53 bongo kernel: [249932.212258] usb 2-2: USB disconnect, address 40

So it was also able to continue reading from kern.log after a reload.

Can you give easy reproduction steps?