[rsyslog-notify] Forum Thread: [Ubuntu 15.10] imklog: cannot open kernel log (/proc/kmsg): - (Mode 'post')

[noreply at adiscon.com]

User: richb-hanover 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26554#p26554

Message: 
----------
I didn't get a solution to my problem (see <!-- l --><a
class="postlink-local"
href="http://kb.monitorware.com/trouble-installing-ubuntu-t12759.html">trouble-installing-ubuntu-t12759.html</a><!--
l --> for details), so I have done more research on my own. I have it
partially working (but there were errors installing).

My syslog and kern.log files now have entries that state
[code:1ol2qth1]rsyslogd: imklog: cannot open kernel log
(/proc/kmsg): Operation not permitted.[/code:1ol2qth1]

[b:1ol2qth1]My Questions[/b:1ol2qth1] (sorry for asking so many):

- I especially want to log entries created by iptables. By default they are
written to /var/log/kern.log
- Does rsyslogd require access to /proc/kmsg to run? (I believe it's true
that commenting out the $ModLoad imklog line removes that dependency)
- Does rsyslogd require access to /proc/kmsg to log messages from iptables?
- I am running on a VPS. Is it likely that the VPS doesn't provide access
to /proc/kmsg for guest OS's? (Maybe that's why I can't read it...)
- How do I restart rsyslogd (say, after editing /etc/rsyslog.conf) to try
new settings?

Many thanks!

Other info:

- I have updated rsyslogd to 8.19.0-0adiscon1wily1 -
/etc/apt/sources.list.d/adiscon-ubuntu-v8-stable-wily.list contains:
[code:1ol2qth1]deb
http://ppa.launchpad.net/adiscon/v8-stable/ubuntu wily main
# deb-src http://ppa.launchpad.net/adiscon/v8-stable/ubuntu
wily main
# deb-src http://ppa.launchpad.net/adiscon/v8-stable/ubuntu
wily main[/code:1ol2qth1]

- Here's the installation log. Note the errors about start/stop actions.

[code:1ol2qth1]richb at netperf:~$ sudo apt-get install rsyslog
Reading package lists... Done
Building dependency tree
Reading state information... Done
Suggested packages:
  rsyslog-mysql rsyslog-pgsql rsyslog-doc rsyslog-gssapi rsyslog-relp
rsyslog-elasticsearch rsyslog-mmjsonparse rsyslog-imptcp apparmor
Recommended packages:
  logrotate
The following NEW packages will be installed:
  rsyslog
0 upgraded, 1 newly installed, 0 to remove and 32 not upgraded.
Need to get 0 B/625 kB of archives.
After this operation, 2,003 kB of additional disk space will be used.
Selecting previously unselected package rsyslog.
(Reading database ... 136897 files and directories currently
installed.)
Preparing to unpack
.../rsyslog_8.19.0-0adiscon1wily1_amd64.deb
...
Unpacking rsyslog (8.19.0-0adiscon1wily1) ...
Processing triggers for systemd (225-1ubuntu9) ...
Processing triggers for man-db (2.7.4-1) ...
Setting up rsyslog (8.19.0-0adiscon1wily1) ...

Creating config file /etc/rsyslog.d/50-default.conf with new
version
update-rc.d: warning: start and stop actions are no longer
supported; falling back to defaults
Job for rsyslog.service failed because the control process exited with
error code. See "systemctl status rsyslog.service" and "journalctl
-xe" for details.
invoke-rc.d: initscript rsyslog, action "start" failed.
dpkg: error processing package rsyslog (--configure):
 subprocess installed post-installation script returned error exit status 1
Processing triggers for systemd (225-1ubuntu9) ...
Errors were encountered while processing:
 rsyslog
E: Sub-process /usr/bin/dpkg returned an error code (1)[/code:1ol2qth1]