How to fix rsyslog default logging template on Rocky Linux8/RHEL8
RL8/RHEL8 have changed how they handle default logging template configuration.
To get current SCS syslog configuration to match what we used to have on CentOS7, please replace /etc/rsyslog.d/swarm-platform.conf with the following content:
# Load imtcp module for TCP syslog reception
$ModLoad imtcp
$InputTCPServerRun 514
# Load imudp module for UDP syslog reception
$ModLoad imudp
$UDPServerRun 514
# Define custom log message format template
template (name="SwarmPlatformFormat" type="string" string="%fromhost-ip% %rawmsg%\n")
# Define RainerScript block for advanced log processing
if $syslogfacility-text == 'local7' then {
action(type="omfile" file="/var/log/datacore/swarm-platform.log" template="SwarmPlatformFormat")
}
# NO LONGER SUPPORTED AFTER ES 6.x - local0.* /var/log/datacore/elasticsearch.log
local1.* /var/log/datacore/haproxy.log;SwarmPlatformFormat
local2.* /var/log/datacore/swarmfs.log;SwarmPlatformFormat
local3.* /var/log/datacore/platform.log;SwarmPlatformFormat
local4.* /var/log/datacore/cloudgateway_audit.log;SwarmPlatformFormat
local5.* /var/log/datacore/cloudgateway_server.log;SwarmPlatformFormat
local6.* /var/log/datacore/castor.log;SwarmPlatformFormat
local0,local1,local2,local3,local4,local5,local6.* stop
Then restart rsyslog to activate the change:
systemctl restart rsyslog
© DataCore Software Corporation. · https://www.datacore.com · All rights reserved.