diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-15 16:27:18 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-15 16:27:18 +0000 |
commit | f7f20c3f5e0be02585741f5f54d198689ccd7866 (patch) | |
tree | 190d5e080f6cbcc40560b0ceaccfd883cb3faa01 /source/troubleshooting/file_not_written.rst | |
parent | Initial commit. (diff) | |
download | rsyslog-doc-f7f20c3f5e0be02585741f5f54d198689ccd7866.tar.xz rsyslog-doc-f7f20c3f5e0be02585741f5f54d198689ccd7866.zip |
Adding upstream version 8.2402.0+dfsg.upstream/8.2402.0+dfsg
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'source/troubleshooting/file_not_written.rst')
-rw-r--r-- | source/troubleshooting/file_not_written.rst | 53 |
1 files changed, 53 insertions, 0 deletions
diff --git a/source/troubleshooting/file_not_written.rst b/source/troubleshooting/file_not_written.rst new file mode 100644 index 0000000..4ed915d --- /dev/null +++ b/source/troubleshooting/file_not_written.rst @@ -0,0 +1,53 @@ +Output File is not Being Written +================================ + +Note: current rsyslog versions have somewhat limited error reporting +inside omfile. If a problem persists, you may want to generate a +rsyslog debug log, which often can help you pinpoint the actual root +cause of the problem more quickly. + +To learn more about the current state of error reporting, follow +our `bug tracker <https://github.com/rsyslog/rsyslog/issues/548>`_ +for this issue. + +The following subsections list frequent causes for file writing +problems. You can quickly check this without the need to create a +debug log. + +SELinux +------- +This often stems back to **selinux** permission errors, especially +if files outside of the ``/var/log`` directory shall be written +to. + +Follow the :doc:`SELinux troubleshooting guide <selinux>` +to check for this condition. + +Max Number of Open Files +------------------------ +This can also be caused by a too low limit on number of open +file handles, especially when dynafiles are being written. + +Note that some versions of systemd limit the process +to 1024 files by default. The current +set limit can be validated by doing:: + + cat /proc/<pid>/limits + +and the currently open number of files can be obtained by doing:: + + ls /proc/<pid>/fd | wc -l + +Also make sure the system-wide max open files is appropriate using:: + + sysctl fs.file-max + +Some versions of systemd completely ignore +``/etc/security/limits*``. To change limits for a service in systemd, edit +``/usr/lib/systemd/system/rsyslog.service`` and under ``[Service]`` add: +``LimitNOFILE=<new value>``. + +Then run:: + + systemctl daemon-reload + systemctl restart rsyslog |