rsyslog inside docker containers => "rsyslogd is not running ... failed" -

-

i running rsyslog within docker containers send udp messages logstash.

when log docker container, , type:

service rsyslog status

shows:

rsyslogd not running ... failed!

however, while in container, if type:

service rsyslog start

it starts no errors , no real sign of why failed @ start

i can not figure out why failing!!!!

*the rsyslog conf file has not been modified except modules allow imfile. rsyslog.conf follows:

#  /etc/rsyslog.conf    configuration file rsyslog. # #                       more information see #                       /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html ################# #### modules #### ################# module(load="imfile" pollinginterval="10") module(load="imuxsock" )  # provides support local system logging module(load="immark")  #provides --mark-- message capability  ########################### #### global directives #### ###########################  # # use traditional timestamp format. # enable high precision timestamps, comment out following line. # $actionfiledefaulttemplate rsyslog_traditionalfileformat  # # set default permissions log files. # $fileowner root $filegroup adm $filecreatemode 0644 $dircreatemode 0755 $umask 0022  # # place spool , state files # $workdirectory /var/spool/rsyslog  # # include config files in /etc/rsyslog.d/ # $includeconfig /etc/rsyslog.d/*.conf   ############### #### rules #### ###############  # # first standard log files.  log facility. # auth,authpriv.*                 /var/log/auth.log *.*;auth,authpriv.none          -/var/log/syslog #cron.*                         /var/log/cron.log daemon.*                        -/var/log/daemon.log kern.*                          -/var/log/kern.log lpr.*                           -/var/log/lpr.log mail.*                          -/var/log/mail.log user.*                          -/var/log/user.log  # # logging mail system.  split # easy write scripts parse these files. # mail.info                       -/var/log/mail.info mail.warn                       -/var/log/mail.warn mail.err                        /var/log/mail.err  # # logging inn news system. # news.crit                       /var/log/news/news.crit news.err                        /var/log/news/news.err news.notice                     -/var/log/news/news.notice  # # "catch-all" log files. # *.=debug;\         auth,authpriv.none;\         news.none;mail.none     -/var/log/debug *.=info;*.=notice;*.=warn;\         auth,authpriv.none;\         cron,daemon.none;\         mail,news.none          -/var/log/messages  # # emergencies sent logged in. # *.emerg                         :omusrmsg:*  # # have messages displayed on console, on virtual # console leave idle. # #daemon,mail.*;\ #       news.=crit;news.=err;news.=notice;\ #       *.=debug;*.=info;\ #       *.=notice;*.=warn       /dev/tty8  # named pipe /dev/xconsole `xconsole' utility.  use it, # must invoke `xconsole' `-file' option: # #    $ xconsole -file /dev/xconsole [...] # # note: adjust list below, or you'll go crazy if have reasonably #      busy site.. # daemon.*;mail.*;\         news.err;\         *.=debug;*.=info;\         *.=notice;*.=warn       |/dev/xconsole

*i have script file starts rsyslog

if [[ -z "$(pgrep rsyslog)" ]];   echo "starting rsyslog"   service rsyslog start fi

my conf file follows:

##get nginx error logs $inputfilename /var/log/nginx/error.log $inputfiletag http-error $inputfilestatefile stat-nginx-error $inputfileseverity error $inputfilefacility local7 $inputrunfilemonitor  #grab php-fpm access logs $inputfilename /var/log/php-fpm/access_log $inputfiletag php-fpm-access $inputfilestatefile stat-php-fpm-access $inputfileseverity info $inputfilefacility local7 $inputrunfilemonitor  #grab php-fpm error logs $inputfilename /var/log/php-fpm/error_log $inputfiletag php-fpm-error $inputfilestatefile stat-php-fpm-error $inputfileseverity error $inputfilefacility local7 $inputrunfilemonitor  #json template  template(name="json_temp" type="list")   { constant(value="{")     constant(value="\"@timestamp\":\"")         property(name="timegenerated" dateformat="rfc3339")     constant(value="\",\"message\":\"")         property(name="msg")     constant(value="\",\"severity_label\":\"")  property(name="syslogseverity-text")     constant(value="\",\"severity\":\"")        property(name="syslogseverity")     constant(value="\",\"facility_label\":\"")  property(name="syslogfacility-text")     constant(value="\",\"facility\":\"")        property(name="syslogfacility")     constant(value="\",\"program\":\"")         property(name="programname")     constant(value="\",\"pid\":\"")             property(name="procid")     constant(value="\",\"rawmsg\":\"")          property(name="rawmsg")     constant(value="\",\"syslogtag\":\"")       property(name="syslogtag")     constant(value="\"}\n")   }  if $programname == 'http-error' @ip.address:port;json_temp if $programname == 'http-error' stop if $programname == 'php-fpm-access' @ip.address:port;json_temp if $programname == 'php-fpm-access' stop if $programname == 'php-fpm-error' @ip.address:port;json_temp if $programname == 'php-fpm-error' stop   *.* @ip.address:port;json_temp

any awesome because not understand why not starting up.

cheers


Comments

Post a Comment

Popular posts from this blog

c# - How Configure Devart dotConnect for SQLite Code First? -

-
can configure following sample code ? when run following code, error : no entity framework provider found ado.net provider invariant name 'devart.data.sqlite' setting in machine.config <system.data> <dbproviderfactories> <add name="dotconnect sqlite" invariant="devart.data.sqlite" description="devart dotconnect sqlite" type="devart.data.sqlite.sqliteproviderfactory, devart.data.sqlite, version=4.6.287.0, culture=neutral, publickeytoken=09af7300eec23701" /> </dbproviderfactories> </system.data> after add below block code in app.config <?xml version="1.0"?> <configuration>   <configsections> <!-- more information on entity framework configuration, visit http://go.microsoft.com/fwlink/?linkid=237468 --> <section name="entityframework" type="system.data.entity.internal.configfile.entityframeworksection, entit...
Read more

java - Copying object fields -

-
what best way of copying classes when need have 2 independent variables? have simple class: public class myclass { boolean = false; string b= "not empty"; } do need make method : assign(myclass data ) { a= data.a; b= data.b; } is there automatic method copy (duplicate) objects in java? do need make method : pretty close. instead of making method, should make constructor. such constructors called copy constructor , , create them this: myclass(myclass data) { = data.a; b = data.b; } and create copy of instance, use constructor this: myclass obj1 = new myclass(); myclass obj2 = new myclass(obj1); copy constructor can tedious : using copy constructor create deep-copy can tedious, when class has mutable fields. in case, assignment create copy of reference, , not object itself. have create copy of fields (if want deep copy). can go recursive. a better way create deep copy serialize , deserialize object. why not use clone()? ...
Read more

c++ - Clear the memory after returning a vector in a function -

-
i have function processes , stores lot of data in , returns results vector of class. amount of data stored in function tremendous , want clear storage memory of function after finished job. necessary (does function automatically clear memory) or should clear memory function? update: vector<customers> process(char* const *filename, vector<int> id) { vector<customers> list_of_customers; (perform actions) return list_of_customers; } variables defined locally within function automatically released @ end of function scope. destructors objects called, should free memory allocated objects (if objects coded correctly). example of such object std::vector . anything you've allocated new must have corresponding delete release storage. try avoid doing own allocation , use raii instead, i.e. containers or smart pointers.
Read more