[rsyslog-notify] Forum Thread: ruleset does not work, no writing into file - (Mode 'post')

[noreply at adiscon.com]

User: vogster 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24320#p24320

Message: 
----------
Hello syslog forum,

I am new with rsyslog and my first try is to store syslog-messages from udp
into a file by using a ruleset.
my /etc/rsyslog.conf file has the following content:


#### MODULES ####
# Provides UDP syslog reception
module(load="imudp")
module(load="omfile")
module(load="omruleset")

#### RULESETS ####
ruleset (name="subsys-a") {
action (type="omfile" file="/logfiles/subsys-a/subsys-a.log")
}
input (type="imudp" port="50001" ruleset="subsys-a")


the dir /logfiles/subsys-a ist stil there, iptables is disabled.
the syslog-client works fine, I can see the data packet wir tcpdump:
[root at kk-syslog ~]# tcpdump port 50001
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
16:47:19.300730 IP 192.168.1.133.syslog > 192.168.1.136.50001: SYSLOG
lpr.emergency, length: 41

thanks for your help!!
Vogster