[rsyslog-notify] Forum Thread: Imfile not working with Rsyslog 8.8.0 on CentOS 7 - (Mode 'post')

[noreply at adiscon.com]

User: dickch03 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25351#p25351

Message: 
----------
I have setup Rsyslog 8.8.0 on my CentOS 7 client and am trying to include
an application log file using imfile located at /home/azureuser/newgen.log
but I don't see the application log file contents being picked up by the
syslog or sent to the remote log server.

The application log file is set to 777 and is owned by root. Rsyslog is
also running as root.

I don't see any errors on restart and I have tried with debugging enabled
but not clear on how to see the debugging output.

I have extensively searched for a solution to this issue but so far have
not found anything so would appreciate any help anyone can provide. thanks.

[b:1t5i464o]Extract of newgen.log:[/b:1t5i464o]
INFO [2015-03-23 04:26:25,356](LoginController.java:43) - User action is: 0
 INFO [2015-03-23 04:26:35,794](LoginController.java:43) - User action is:
2
 INFO [2015-03-23 04:26:35,795](AccessManager.java:18) - Validating user by
loginId admin
 INFO [2015-03-23 04:26:35,941](LoginController.java:75) - User login
result is: 200
 INFO [2015-03-23 04:26:36,002](PaymentDAO.java:116) - No of rows found for
revenue data is: 0, {txnType=MERCHANT_PAYMENT, paymentMode=NetBanking,
provider=Provider, toDate=2015-03-23 23:59:59.999, fromDate=2015-03-23
00:00:00.0, status=200}
 INFO [2015-03-23 04:26:36,014](PaymentDAO.java:149) - query is: select
hour(h.transactionDate), count(status) from TransactionHeaderDTO h where
h.txnType=:txnType and h.status=:status and h.transactionDate>=:fromDate
and h.transactionDate<=:toDate group by hour(h.transactionDate) order by
hour(h.transactionDate) 
 INFO [2015-03-23 04:26:36,015](PaymentDAO.java:150) - No of rows HOURLY
REPORT DATA data is: 0, {txnType=MERCHANT_PAYMENT, toDate=2015-03-23
23:59:59.999, fromDate=2015-03-23 00:00:00.0, status=200}


[b:1t5i464o]My rsyslog config file:[/b:1t5i464o]

# This configuration has been generated by using the
# rsyslog Configuration Builder which can be found at:
# <!-- m --><a class="postlink"
href="http://www.rsyslog.com/rsyslog-configuration-builder/">http://www.rsyslog.com/rsyslog-configuration-builder/</a><!--
m -->
#
# Default Settings

# Load Modules

module(load="imfile")

module(load="imuxsock")

# rsyslog Templates

# rsyslog Input Modules

input(type="imfile"
                 File="/home/azureuser/newgen.log"
                 Tag="ngp_app_1:"
                 StateFile=""
                 Severity="debug"
                 Facility="local5")

# Log anything (except mail) of level info or higher.

# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none                /var/log/messages

# The authpriv file has restricted access.
authpriv.*                                              /var/log/secure

# Log all the mail messages in one place.
mail.*                                                  -/var/log/maillog

# Log cron stuff
cron.*                                                  /var/log/cron

# Everybody gets emergency messages
*.emerg                                                 :omusrmsg:*

# Save news errors of level crit and higher in a special file.
uucp,news.crit                                          /var/log/spooler

# Save boot messages also to boot.log
local7.*                                                /var/log/boot.log

# ### begin forwarding rule ###
# remote host is: name/ip:port, e.g. 192.168.0.1:514, port optional
*.* @192.168.100.68:515
# ### end of the forwarding rule ###