Remote sysloging (rsyslog) of Hypervisor

Latest response

Hi,

Has anyone been able to configure remote logging on a Hypervisor using tcp. When I configure rsyslog and start it using init scripts, it doesn’t seem to work the same way as on a standard enterprise rhel 6.2

When debugging it look like the module lmnsd_ptcp doesn’t get loaded properly. And a tcpdump shows no packes is send.

The same result is produced if I try using’-f’ to define configurationfile. I allso compare /etc/init.d/rsyslog and /etc/init.d/functions wit at rhel6.2 and they do not differ.

 

Any help is appreciated.

**/etc/rsyslog.conf**
*.* @@RsyslogServerIP:10775

**Fail to work: Doesn’t send tcp messages**
# service rsyslog restart
# /etc/inet.d/rsyslog restart

**This works: Sends tcp messages**
# /sbin/rsyslogd -i /var/run/syslogd.pid -c 4

**NOT working debug cut**
caller requested object 'nsd_ptcp', not found (iRet -3003)
Requested to load module 'lmnsd_ptcp'
loading module '/lib64/rsyslog/lmnsd_ptcp.so'
source file nsd_ptcp.c requested reference for module 'lmnetstrms', reference count now 3
module of type 2 being loaded.
source file netstrms.c requested reference for module 'lmnsd_ptcp', reference count now 1
file netstrms.c released module 'lmnsd_ptcp', reference count now 0
module 'lmnsd_ptcp' has zero reference count, unloading...
Unloading module lmnsd_ptcp
file nsd_ptcp.c released module 'lmnetstrms', reference count now 2
Action requested to be suspended, done that.

**Working debug cut**
caller requested object 'nsd_ptcp', not found (iRet -3003)
Requested to load module 'lmnsd_ptcp'
loading module '/lib64/rsyslog/lmnsd_ptcp.so'
source file nsd_ptcp.c requested reference for module 'lmnetstrms', reference count now 3
module of type 2 being loaded.
source file netstrms.c requested reference for module 'lmnsd_ptcp', reference count now 1
Entry(7fe86cc26f20): type 1, (CONSTANT), value: '<'
…….
Loaded Module: Name='lmnsd_ptcp', IFVersion=5, type=library module.
Entry points:
queryEtryPt:        0x7fe869209750
doAction:           0x0
parseSelectorAct:   0x0
dbgPrintInstInfo:   0x0
freeInstance:       0x0

 

Responses