Skip to main content

lfd on example.com SYSLOG Check Failed - Problem with logging.

Comments

4 comments

  • cPRex Jurassic Moderator
    Hey there! This could be an issue with rsyslog, as outlined here:
    -2
  • peterk
    Hello, I tried this solution but unfortunately it does not work. It looks like rsyslog is working but not saving any information. The system is a new installation from two weeks ago, I did not make any changes to etc/rsyslog.conf
    or etc/systemd/journald.conf
    All settings are default.
    0
  • peterk
    Hello, I found the solution to my problem - maybe it will be useful to someone. The problem was caused by the journal system, its files were corrupted, below is how I fixed it. I verified the files by: journalctl --verify
    This is where the errors occurred. Next rotate files: journalctl --rotate
    Then I delete the old entries: journalctl --vacuum-time=1s
    I then delete all files from the directory: var/log/journal
    Then delete the file: var/lib/rsyslog/imjournal.state
    (This file stores the rsyslog state for journal file reading) The files will be restored after restarting the services. Now you just need to restart the services: systemctl restart systemd-journald.socket systemctl restart systemd-journald systemctl restart rsyslog
    And everything is back to normal.
    2
  • cPRex Jurassic Moderator
    I'm glad you were able to come up with a good workaround!
    0

Please sign in to leave a comment.