Ubuntu

rsyslog errors 2007 and 2359

Asked by Nadav Levi Yahel

Hello how are you guys?
i expirience a lot of error inside the syslog:

localhost rsyslogd: action 'action-8-builtin:omfile' resumed (module 'builtin:omfile') [v8.2112.0 try https://www.rsyslog.com/e/2359 ]

localhost rsyslogd: action 'action-8-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2112.0 try https://www.rsyslog.com/e/2007 ]

i read about that and its particular to UBUNTU users...
when i ask chatGPT its tell me maybe its apparmor.

i buy the machine on Google Cloud and didnt make any change on the machine (default configuration)
if someone have idea why the syslog generate so many times this 2 errors i will appriciate the help

This is a post asking for help on GITHUB - RSYSLOG:
https://github.com/rsyslog/rsyslog/issues/5408

Regards,
Nadav

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Manfred Hampl (m-hampl) said : 		#1

Maybe something similar to the problem in https://ubuntu-mate.community/t/rsyslogd-action-action-0-builtin-omfile-resumed-module-builtin-omfile/24105

Revision history for this message
Nadav Levi Yahel (nadav123) said : 		#2

I looked on the link
https://ubuntu-mate.community/t/rsyslogd-action-action-0-builtin-omfile-resumed-module-builtin-omfile/24105

its not normal what this guy did...
he deleted all the default configuration file of ubuntu (rsyslog.conf)

this not the way... something triggers this error, something try to create a socket:
https://www.rsyslog.com/e/2007

to delete the default permission the UBUNTU ship with... is not the right way...

Revision history for this message
actionparsnip (andrew-woodhead666) said : 		#3

Seems to be this line causing the issue:

*.*;cron.!=info;mail.!=info |/dev/xconsole

If you comment it out, does it help?

Revision history for this message
Nadav Levi Yahel (nadav123) said : 		#4

@actionparsnip thanks for your response.
Where you see that:
*.*;cron.!=info;mail.!=info |/dev/xconsole

from each file to comment this out?

/etc/crontab ?

/etc/rsyslog.conf ?

Revision history for this message
actionparsnip (andrew-woodhead666) said : 		#5

From what I'm seeing, it's in
/etc/rsyslog.conf

Can you help with this problem?

Provide an answer of your own, or ask Nadav Levi Yahel for more information if necessary.

To post a message you must log in.