Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove rsyslog obsolete legacy imfile module directive PollingInterval #22150

Open
jasonsketchup opened this issue Mar 11, 2024 · 1 comment
Open

Comments

@jasonsketchup
Copy link

Documentation Page

The following documentation contains outdated information that will cause rsyslog integration to fail:

Relevant excerpt:

module(load="imfile" PollingInterval="10") #needs to be done just once

Issue Description

TL;DR For Rsyslog version >= 8.2112, module imfile fails to load when obsolete legacy directive PollingInterval is set.

See https://www.rsyslog.com/doc/configuration/modules/imfile.html

Relevant excerpt:

Traditionally, imfile used polling mode, which is much more resource-intense (and slower) than inotify mode. It is suggested that users turn on “polling” mode only if they experience strange problems in inotify mode. In theory, there should never be a reason to enable “polling” mode and later versions will most probably remove it.

In attempting to configure Ubuntu 22.04.1 with [rsyslog](rsyslogd: version 8.2112.0), per the documentation, the systemd journal is spammed with messages similar to:

mar 11 18:01:23 subuilds rsyslogd[2045687]: action 'action-9-builtin:omfile' resumed (module 'builtin:omfile') [v8.2112.0 try https://www.rsyslog.com/e/2359 ]
mar 11 18:01:23 subuilds rsyslogd[2045687]: action 'action-9-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. >
mar 11 18:01:23 subuilds rsyslogd[2045687]: action 'action-9-builtin:omfile' suspended (module 'builtin:omfile'), next retry is Mon Mar 11 18:01:53 2024, retry nbr 0. There should be messages before>

Looking further back in the systemd journal, the following events are captured:

mar 07 20:42:10 subuilds rsyslogd[4136391]: error during parsing file /etc/rsyslog.conf, on or before line 30: parameter 'PollingInterval' not known -- typo in config file? [v8.2112.0 try https://ww>
mar 07 20:42:10 subuilds rsyslogd[4136391]: input module name 'imfile' is unknown [v8.2112.0 try https://www.rsyslog.com/e/2209 ]
@maycmlee
Copy link
Contributor

Hi @jasonsketchup, thanks for opening this issue! We'll take a look into it and be back in touch.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants