[rsyslog-notify] Forum Thread: Re: ERROR: imuxsock cannot create /dev/log - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24256#p24256

Message: 
----------
you may be root when you run rsyslog, but since you have rsyslog configured
to drop root privileges, by the time it gets around to trying to open
/dev/log, it isn't root any longer, so it doesn't have permission.

If you leave out the privilege dropping, everything should work just fine.

If you still want to chase this down, we'd need to see the config you are
using to see if the problem is a bug in rsyslog, or if there is some wrong
ordering of things in the config file.

privilege dropping is very nice in theory, but can be fairly painful in
practice