In CentOS 7 after upgrading the package rsyslog-7.4.7-12.el7.x86_64 the log files are not updated, to fix this problem need to add type="imuxsock" HostName="localhost" Socket="/dev/log" after $ModLoad in the file /etc/rsyslogd.conf.
Hola,
En centos 7 hay un bug, que cuando se actualiza el paquete rsyslog-7.4.7-12.el7.x86_64 , se dejan de escribir los logs, para solucionarlo hay que editar el fichero /etc/rsyslog.conf y añadir la linea type="imuxsock" HostName="localhost" Socket="/dev/log" debajo de $ModLoad imuxsock .
Example:
[root@root log]# cat /etc/rsyslog.conf
# rsyslog configuration file
# For more information see /usr/share/doc/rsyslog-*/rsyslog_conf.html
# If you experience problems, see http://www.rsyslog.com/doc/troubleshoot.html
#### MODULES ####
# The imjournal module bellow is now used as a message source instead of imuxsock.
$ModLoad imuxsock # provides support for local system logging (e.g. via logger command)
type="imuxsock" HostName="localhost" Socket="/dev/log"
$ModLoad imjournal # provides access to the systemd journal
#$ModLoad imklog # reads kernel messages (the same are read from journald)
#$ModLoad immark # provides --MARK-- message capability
Hola,
En centos 7 hay un bug, que cuando se actualiza el paquete rsyslog-7.4.7-12.el7.x86_64 , se dejan de escribir los logs, para solucionarlo hay que editar el fichero /etc/rsyslog.conf y añadir la linea type="imuxsock" HostName="localhost" Socket="/dev/log" debajo de $ModLoad imuxsock .
Example:
[root@root log]# cat /etc/rsyslog.conf
# rsyslog configuration file
# For more information see /usr/share/doc/rsyslog-*/rsyslog_conf.html
# If you experience problems, see http://www.rsyslog.com/doc/troubleshoot.html
#### MODULES ####
# The imjournal module bellow is now used as a message source instead of imuxsock.
$ModLoad imuxsock # provides support for local system logging (e.g. via logger command)
type="imuxsock" HostName="localhost" Socket="/dev/log"
$ModLoad imjournal # provides access to the systemd journal
#$ModLoad imklog # reads kernel messages (the same are read from journald)
#$ModLoad immark # provides --MARK-- message capability