[rsyslog-notify] Forum Thread: Re: Why are all my logs going to /var/log/audit/audit.log - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26378#p26378

Message: 
----------
rsyslog is in a different SELinux context when it's started by the system
than when it's started by you as root

typically this leads to "it works when I run rsyslog manually, but not when
the system starts it", which is slightly different than what you were
reporting, which is why I didn't immediately catch on.

Glad you solved it.