[rsyslog-notify] Forum Thread: Trouble installing on Ubuntu 15.10 - (Mode 'edit_topic')

[noreply at adiscon.com]

User: richb-hanover 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26333#p26333

Message: 
----------
I had trouble with empty/non-updating log files on my Ubuntu 14.04 box. I
ultimately realized that no syslogd/rsyslogd was running, so I tried to
install Ubuntu's standard version via apt-get. I got the well-known
message: "The user `syslog' is already a member of `adm'" with a hang.

Google led me to this site, where I decided to install from this PPA.

I now have a different error running apt-get install rsyslog. I had
previously run sudo apt-get remove rsyslog and sudo apt-get purge rsyslog
and also killed / removed all processes with 'rsyslog' in them. I've
attached some output at the end of the message.

* First is the output from sudo apt-get install --reinstall rsyslog
* Next is output from journalctl -xe (it's empty)
* Next is a ps, showing rsyslogd is running
* Next is a syslog output, showing rsyslogd start messages, and a problem
with /proc/kmsg
* Finally, ls -al /proc/kmsg

Any advice for getting this working? What other information could I
provide? Many thanks! 

[code]
#
# 
richb at netperf:~$ sudo apt-get install --reinstall rsyslog
Reading package lists... Done
Building dependency tree
Reading state information... Done
Suggested packages:
  rsyslog-mysql rsyslog-pgsql rsyslog-doc rsyslog-gssapi rsyslog-relp
rsyslog-elasticsearch
  rsyslog-mmjsonparse rsyslog-imptcp apparmor
Recommended packages:
  logrotate
The following NEW packages will be installed:
  rsyslog
0 upgraded, 1 newly installed, 0 to remove and 3 not upgraded.
Need to get 0 B/636 kB of archives.
After this operation, 2,087 kB of additional disk space will be used.
Selecting previously unselected package rsyslog.
(Reading database ... 136805 files and directories currently installed.)
Preparing to unpack .../rsyslog_8.16.0-0adiscon1wily1_amd64.deb ...
Unpacking rsyslog (8.16.0-0adiscon1wily1) ...
Processing triggers for man-db (2.7.4-1) ...
Processing triggers for systemd (225-1ubuntu9) ...
Setting up rsyslog (8.16.0-0adiscon1wily1) ...

Creating config file /etc/rsyslog.d/50-default.conf with new version
update-rc.d: warning: start and stop actions are no longer supported;
falling back to defaults
A dependency job for rsyslog.service failed. See 'journalctl -xe' for
details.
invoke-rc.d: initscript rsyslog, action "start" failed.
dpkg: error processing package rsyslog (--configure):
 subprocess installed post-installation script returned error exit status 1
Processing triggers for systemd (225-1ubuntu9) ...
Errors were encountered while processing:
 rsyslog
E: Sub-process /usr/bin/dpkg returned an error code (1)
[/code]
[code]
richb at netperf:~$ journalctl -xe
No journal files were found.
-- No entries --
[/code]
[code]
richb at netperf:~$ ps ax | grep rsys
 2151 ?        Ssl    0:00 /usr/sbin/rsyslogd -n
 2190 pts/0    S+     0:00 grep --color=auto rsys
[/code]
[code]
richb at netperf:~$ sudo tail -f /var/log/syslog
...
Feb 11 09:47:02 netperf rsyslogd: [origin software="rsyslogd"
swVersion="8.16.0" x-pid="2151" x-info="http://www.rsyslog.com"] start
Feb 11 09:47:02 netperf rsyslogd: rsyslogd's groupid changed to 109
Feb 11 09:47:02 netperf rsyslogd: rsyslogd's userid changed to 105
Feb 11 09:47:02 netperf rsyslogd: imklog: cannot open kernel log
(/proc/kmsg): Operation not permitted.
...
[/code]
[code]
richb at netperf:~$ sudo ls -al /proc/kmsg
-r-------- 1 root root 0 Feb 11 09:47 /proc/kmsg
[/code]