[rsyslog-notify] Forum Thread: guardtime missing? - (Mode 'post')

[noreply at adiscon.com]

User: goodleaf 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24275#p24275

Message: 
----------
Hi,

I am trying to use guardtime to secure logs, but I am running into 2
problems:

1) rsyslogd: could not load module '/usr/lib/rsyslog/lmsig_gt.so', dlopen:
/usr/lib/rsyslog/lmsig_gt.so: cannot open shared object file: No such file
or directory  [try <!-- m --><a class="postlink"
href="http://www.rsyslog.com/e/2066">http://www.rsyslog.com/e/2066</a><!--
m --> ]

Apparently, the prebuilt Rsyslog in the adiscon repository does not appear
to include Guardtime. Would it be possible to include that, e.g. as
rsyslog-guardtime or similar, or will I have to compile Rsyslog from source
in order to include Guardtime?

2) The tutorials I have found regarding guardtime says I should use
sig.keepTreeHashes="on" sig.keepRecordHashes="on", however, Rsyslog
complains when I use it:

rsyslogd: error during parsing file /etc/rsyslog.d/30-remote.conf, on or
before line 22: parameter 'sig.keepRecordHashes' not known -- typo in
config file? [try <!-- m --><a class="postlink"
href="http://www.rsyslog.com/e/2207">http://www.rsyslog.com/e/2207</a><!--
m --> ]
rsyslogd: error during parsing file /etc/rsyslog.d/30-remote.conf, on or
before line 22: parameter 'sig.keepTreeHashes' not known -- typo in config
file? [try <!-- m --><a class="postlink"
href="http://www.rsyslog.com/e/2207">http://www.rsyslog.com/e/2207</a><!--
m --> ]

Are these no longer needed?


For the record, I am using rsyslogd: version 8.1.5 from the adiscon Ubuntu
repository.