The rsyslog service stopped logging to any logs including /var/log/messages

Symptoms

The system logs, including messages and maillog, are no longer updating.

Description

The issue occurs when the rsyslog PID and/or state files become corrupt. The files must be moved out of the way so that they can be regenerated.

Procedure

1. Access the server's command line as the 'root' user via SSH or "Terminal" in WHM.
2. Stop the rsyslog service.

   systemctl stop rsyslog

3. Move aside the PID file.

   mv -v /var/run/rsyslogd.pid{,.$(date +%s)}

4. Move aside the state file.

   mv -v /var/lib/rsyslog/imjournal.state{,.$(date +%s)}

5. Restart the rsyslog service.

   systemctl start rsyslog