[Bug 1675515] Re: old KLogPermitNonKernel directive error in rsyslog.conf

[Andreas Hasenack]

The new option doesn't seem to be working correctly:
https://github.com/rsyslog/rsyslog/issues/477

With the old style config:
#module(load="imklog" permitnonkernelfacility="on")   # provides kernel logging support
$ModLoad imklog
#KLogPermitNonKernelFacility on

I get kernel messages in /var/log/syslog:
root at nsn7:~# grep andreas-was-here /var/log/syslog
root at nsn7:~# echo andreas-was-here > /dev/kmsg 
root at nsn7:~# grep andreas-was-here /var/log/syslog
Jul 12 16:46:33 nsn7 kernel: [27774.476193] andreas-was-here
root at nsn7:~# 

But with this new v6 config style:
module(load="imklog" permitnonkernelfacility="on")   # provides kernel logging support
#$ModLoad imklog
#$KLogPermitNonKernelFacility on

I don't. Which is the github issue I mentioned.

Still, the ubuntu package is using a mix of old style vs new style when
loading the imklog module, and that won't work anyway. We either go with
v6 for both (loading and setting the option). or with legacy.

** Bug watch added: github.com/rsyslog/rsyslog/issues #477
   https://github.com/rsyslog/rsyslog/issues/477

** Also affects: rsyslog via
   https://github.com/rsyslog/rsyslog/issues/477
   Importance: Unknown
       Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to rsyslog in Ubuntu.
https://bugs.launchpad.net/bugs/1675515

Title:
  old KLogPermitNonKernel directive error in rsyslog.conf

Status in Rsyslog:
  Unknown
Status in rsyslog package in Ubuntu:
  Confirmed

Bug description:
  The rsyslog.conf provided in Xenial contains an error that is logged
  by rsyslog at startup with the short name. rsyslog ignores a
  '$PreserveFQDN on' when logging this error. This is an issue when
  using a log aggregation facility such as Splunk. A fix is to correct
  the error in the provided rsyslog.conf.

To manage notifications about this bug go to:
https://bugs.launchpad.net/rsyslog/+bug/1675515/+subscriptions