Error: Failed to detect code [LlsNLK7sLm2bxuWS4WvQHdFT3OqCk] in SYSLOG_LOG [/var/log/messages]

Spirogg

• February 04, 2022 17:09

I recently had this issue on a new server installing AlmaLinux 8.5 minimal and then cPanel I guess during OS install - AlmaLinux Minimal did not install rsyslog for some reason or not. UPDATE 02/05/2022 3:21am: Note: The rsyslog package does not come by default on AlmaLinux installations so new installed AlmaLinux servers you need to install rsyslog So I had installed CSF as always and then found this out because I set RESTRICT_SYSLOG = 3 (3 = Restrict syslog/rsyslog access to RESTRICT_SYSLOG_GROUP ** RECOMMENDED **) Then I started getting email errors about every 10 mins. or so EMAIL ERRORS I WAS GETTING Time: Fri Feb 4 04:25:42 2022 -0600 Error: Failed to detect code [LlsNLK7sLm2bxuWS4WvQHdFT3OqCk] in SYSLOG_LOG [/var/log/messages] SYSLOG may not be running correctly on server1.mydomain .tld
- So I did a little searching after trying to restart it [root@server1 ~]# /scripts/restartsrv_rsyslog warn [restartsrv_rsyslog] The system is unable to find systemd configuration for the 'rsyslog' service... (XID g224zj) The "rsyslog" service is disabled.
- But it showed Service is Disabled... So then I installed it and started it, by using terminal execute these lines below. begin the install: # dnf install rsyslog then select : y when your prompted in terminal and click enter key. then start syslog: # systemctl start rsyslog Finally restart : # /scripts/restartsrv_rsyslog DONE!
Here is the output of installing and starting rsyslog [root@server1 ~]# dnf install rsyslog Last metadata expiration check: 0:00:20 ago on Fri 04 Feb 2022 04:42:11 PM CST. Dependencies resolved. ============================================================================================================================================== Package Architecture Version Repository Size ============================================================================================================================================== Installing: rsyslog x86_64 8.2102.0-5.el8 appstream 751 k Installing dependencies: libestr x86_64 0.1.10-1.el8 appstream 27 k libfastjson x86_64 0.99.9-1.el8 appstream 37 k logrotate x86_64 3.14.0-4.el8 baseos 85 k Transaction Summary ============================================================================================================================================== Install 4 Packages Total download size: 900 k Installed size: 2.6 M Is this ok [y/N]: y Downloading Packages: (1/4): logrotate-3.14.0-4.el8.x86_64.rpm 3.0 MB/s | 85 kB 00:00 (2/4): libfastjson-0.99.9-1.el8.x86_64.rpm 1.1 MB/s | 37 kB 00:00 (3/4): libestr-0.1.10-1.el8.x86_64.rpm 770 kB/s | 27 kB 00:00 (4/4): rsyslog-8.2102.0-5.el8.x86_64.rpm 9.3 MB/s | 751 kB 00:00 ---------------------------------------------------------------------------------------------------------------------------------------------- Total 2.1 MB/s | 900 kB 00:00 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Installing : libfastjson-0.99.9-1.el8.x86_64 1/4 Running scriptlet: libfastjson-0.99.9-1.el8.x86_64 1/4 Installing : libestr-0.1.10-1.el8.x86_64 2/4 Running scriptlet: libestr-0.1.10-1.el8.x86_64 2/4 Running scriptlet: logrotate-3.14.0-4.el8.x86_64 3/4 Installing : logrotate-3.14.0-4.el8.x86_64 3/4 Installing : rsyslog-8.2102.0-5.el8.x86_64 4/4 Running scriptlet: rsyslog-8.2102.0-5.el8.x86_64 4/4 Verifying : logrotate-3.14.0-4.el8.x86_64 1/4 Verifying : libestr-0.1.10-1.el8.x86_64 2/4 Verifying : libfastjson-0.99.9-1.el8.x86_64 3/4 Verifying : rsyslog-8.2102.0-5.el8.x86_64 4/4 Installed: libestr-0.1.10-1.el8.x86_64 libfastjson-0.99.9-1.el8.x86_64 logrotate-3.14.0-4.el8.x86_64 rsyslog-8.2102.0-5.el8.x86_64 Complete! [root@server1 ~]# systemctl start rsyslog [root@server1 ~]# /scripts/restartsrv_rsyslog Waiting for "rsyslog" to restart "waiting for "rsyslog" to initialize "finished. Service Status rsyslog (/usr/sbin/rsyslogd -n) is running as root with PID 68633 (systemd+/proc check method). Startup Log Feb 04 16:43:01 server1.domain.com systemd[1]: Starting System Logging Service... Feb 04 16:43:01 server1.domain.com rsyslogd[68633]: [origin software="rsyslogd" swVersion="8.2102.0-5.el8" x-pid="68633" x-info="https://www.rsyslog.com"> start Feb 04 16:43:01 server1.domain.com rsyslogd[68633]: imjournal: journal files changed, reloading... [v8.2102.0-5.el8 try https://www.rsyslog.com/e/0 ] Feb 04 16:43:01 server1.domain.com systemd[1]: Started System Logging Service. rsyslog restarted successfully.
PLEASE: Double check that rsyslog is checked WHM in Home>Service Configuration>Service Manager. - you should see a check mark on the first box to the left

(x) ()

rsyslog System Logger Daemon [QUOTE]Enhanced System Logger Daemon

That's it... SO Far SO Good no Email Errors reported. I hope this my help someone else having this issue :) Kind Regards Spiro

• 

  cPRex Jurassic Moderator

  • February 08, 2022 18:42

  Thanks for posting this. Nothing in cPanel requires it, so we don't force it to be there. We have some more details on this here:

  0
• 

  tyuuu

  • June 05, 2022 16:08

  Hello, when new installing cpanel now, will rsyslog be installed by defaut ? or should we run yum install rsyslog to install it manually ? thanks

  0
• 

  Spirogg

  • June 05, 2022 16:14

  Hello, when new installing cpanel now, will rsyslog be installed by defaut ? or should we run yum install rsyslog to install it manually ? thanks

  
  I think you need to install it with AlmaLinux As l did above.

  0
• 

  tyuuu

  • June 06, 2022 01:38

  Hi, i install cloudlinux 8 and cpanel. because i ever install centos 7 with cpanel, never have the issue, so,i wonder if it is cloudlinux or cpanel's issue, or centos 8 also does not have it installed. thanks

  0
• 

  Spirogg

  • June 06, 2022 02:12

  Hi, i install cloudlinux 8 and cpanel. because i ever install centos 7 with cpanel, never have the issue, so,i wonder if it is cloudlinux or cpanel's issue, or centos 8 also does not have it installed. thanks

  
  Yes couldlinux 8 and AlmaLinux 8 They don"t install it. Not cPanel

  0
• 

  cPRex Jurassic Moderator

  • June 06, 2022 12:43

  Just to add some clarification, rsyslog is not a package that is provided by cPanel as that is controlled by the operating system.

  0

Please sign in to leave a comment.