[rsyslog-notify] Forum Thread: Re: Configuration advice, rolling my own syslog server. - (Mode 'edit')

[noreply at adiscon.com]

User: Ilya Evseev 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24215#p24215

Message: 
----------
Google says that this topic is the only place discussing this problem, so I
want to put here my little notice.

The same environment - OpenVZ farm (CentOS 6.5 x86_64, SELinux disabled)
and Ubuntu 12.04 i386 container with rsyslog + imudp + ommysql.
Tested Rsyslog versions are 8.1.5-0adiscon1 and 5.8.6-1ubuntu8.6.

The same problem:
[size=85:1c49rgq4]"imklog: error reading kernel log - shutting down:
Operation not permitted"[/size:1c49rgq4]
and then tons of:
[size=85:1c49rgq4]"imklog: error reading kernel log - shutting down: Bad
file descriptor"[/size:1c49rgq4]

And the same solution: comment "$ModLoad imklog" in /etc/rsyslog.conf

A bit strange is that only rsyslog in Ubuntu-based containers is affected.
Centos-based (rsyslog-5.8.10-8.el6) are working fine, without imklog
errors.