[rsyslog-notify] Forum Thread: queue files permission - (Mode 'post')

noreply at adiscon.com noreply at adiscon.com
Tue Dec 15 17:38:28 CET 2015


User: emilbart 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26230#p26230

Message: 
----------
Hello,
I have the following rsyslog configuration:
[code:3k6pv1rt]
$WorkDirectory /var/spool/rsyslog

$ModLoad omrelp

$ActionQueueType Disk
$ActionQueueFileName server
$ActionQueueMaxDiskSpace 2m
$ActionQueueSaveOnShutdown on
$ActionResumeRetryCount -1
local1.* :omrelp:10.10.10.10:12345
[/code:3k6pv1rt]
So I send messages to the centralized server using RELP protocol and I use
"Disk" queue type in order to have high reliability. Everything works fine,
when the server is down, all logs are buffered to file
/var/spool/rsyslog/server.00000001.
Now I would like to change the user, group and permission rights of that
file /var/spool/rsyslog/server.00000001.
I tried many configurations using the following directives:
[code:3k6pv1rt]
$FileCreateMode 0640
$FileOwner newUser
$FileGroup newGroup
[/code:3k6pv1rt]
For example one of configuration is:
[code:3k6pv1rt]
$WorkDirectory /var/spool/rsyslog

$ModLoad omrelp

$ActionQueueType Disk
$FileCreateMode 0640
$FileOwner newUser
$FileGroup newGroup
$ActionQueueFileName server
$ActionQueueMaxDiskSpace 2m
$ActionQueueSaveOnShutdown on
$ActionResumeRetryCount -1
local1.* :omrelp:10.10.10.10:12345
[/code:3k6pv1rt]

but I couldn't find any working configuration The user and group of
/var/spool/rsyslog/server.00000001 always is set to root:root and
permission right to 0600.
I tried to find any information about it but without any success.
Is there any way to change it?
Thank you very much in advance for any help.


More information about the rsyslog-notify mailing list