[rsyslog-notify] Forum Thread: Re: imfile error: no file name given - (Mode 'reply')

[noreply at adiscon.com]

User: samiron7567 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26850#p26850

Message: 
----------
Hello Everyone,

I have been going through the post but unable to get a success here with
the imfile implementation. Can any one please let me know what is wrong I
am doing.. or I need to add something.. Actually the custom log is not been
sent out to rsyslog server. Here are the config I marked as bold in my
client's rsyslog.conf file. Also I have pasted server side config as well.
Both are RHEL6.

Client Side:
==========
[root at client1 etc]# rpm -q rsyslog
rsyslog-5.8.10-10.el6_6.x86_64

[root at client1 etc]# egrep -v '^$|^#' rsyslog.conf
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$ModLoad imklog
$ModLoad immark
$ModLoad  imuxsock
$SystemLogRateLimitInterval 2
$SystemLogRateLimitBurst 150
$ModLoad  imudp

[b:l809gifm]$ModLoad imfile
$InputFileName /mnt/tibco/client1/logs/audit.log
$InputFileTag client1.audit.log:
$InputFileStateFile stat-client1-audit-log
$InputFileSeverity info
$InputFileFacility local7
$InputFilePollInterval 1
$InputFilePersistStateInterval 1
$InputRunFileMonitor
[/b:l809gifm]
$UDPServerAddress 127.0.0.1
$UDPServerRun 514
kern.*                                                  /dev/console
*.info;mail.none;authpriv.none;cron.none;local0.none;local6.none 
/var/log/messages
authpriv.*                                                       
/var/log/secure
mail.*                                                          
-/var/log/mail.log
cron.*                                                           
/var/log/cron
*.emerg                                                           *
uucp,news.crit                                                   
/var/log/spooler
local6.warning                                                   
/var/log/audit_orcl.log
LOCAL6.WARNING                                                   
/var/log/audit_orcl.log
local7.*                                                         
/var/log/boot.log
*.* @server1.mydomain:514
[root at client1 etc]#

Server Side:
==========
[root at server1 etc]# rpm -q rsyslog
rsyslog-5.8.10-10.el6_6.x86_64

[root at Server1 ~]# egrep -v '^$|^#' /etc/rsyslog.conf
$template AllLogs, 
"/data/syslog/%HOSTNAME%/%$YEAR%-%$MONTH%-%$DAY%-syslog.log"
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$ModLoad imklog
$ModLoad immark
$ModLoad  imuxsock
$SystemLogRateLimitInterval 2
$SystemLogRateLimitBurst 150
$ModLoad  imudp
$FileOwner root
$FileGroup xxxxxxxx.xxxxxxxxxx
$FileCreateMode 0640
$DirOwner root
$DirGroup xxxxxxxxxxx.xxxxxxxxx
$DirCreateMode 0750
$EscapeControlCharactersOnReceive off
$RepeatedMsgReduction on
$UDPServerAddress x.x.x.x
$UDPServerRun 514
kern.*                                                  /dev/console
*.info;mail.none;authpriv.none;cron.none;local0.none;local6.none 
/var/log/messages
authpriv.*                                                       
/var/log/secure
mail.*                                                          
-/var/log/mail.log
cron.*                                                           
/var/log/cron
*.emerg                                                           *
uucp,news.crit                                                   
/var/log/spooler
local6.warning                                                   
/var/log/audit_orcl.log
LOCAL6.WARNING                                                   
/var/log/audit_orcl.log
local7.*                                                         
/var/log/boot.log
*.* ?AllLogs
[root at Server1 ~]#