Issue with syslog not visible in ISPconfig (solved)

Discussion in 'Tips/Tricks/Mods' started by bvo007, Feb 27, 2025.

Tags:
  1. bvo007

    bvo007 New Member

    Hi,
    I found after repeatably installing Ubuntu minimal 24.04.(1)(2) with rsyslog and the ISPconfig auto install script, that I couldn't read in the ISPConfig panel the syslog messages. After a reboot it worked temporally, but after the daily logrotate the syslog file seemed to be 0 bytes and wouldn't rotate anymore. The server seemed to write then in syslog.1 I removed all the 0 bytes files and did this.
    The solution, add the line: su root syslog
    ### Rsyslog and rotation issue
    ```
    sudo vi /etc/logrotate.d/rsyslog
    ```
    Make it like this
    ```
    /var/log/syslog
    /var/log/mail.log
    /var/log/kern.log
    /var/log/auth.log
    /var/log/user.log
    /var/log/cron.log
    {
    rotate 7
    daily
    missingok
    notifempty
    compress
    delaycompress
    sharedscripts
    su root syslog
    potrotate
    /usr/lib/rsyslog/rsyslog-rotate
    endscript
    }
    ```
    Hopefully it helps somebody.

    Update 02-03-2025: I found out that now I can read the syslog that the logrotation doens't go well (0 bytes files for all the logs in /etc/logrotate.d/rsyslog).
    I first removed all the 0 bytes files (these stop rotating). Then I restarted the rsyslog deamon (sudo systemctl restart rsyslog
    My final solution is/was: sudo rm /etc/logrotate.d/rsyslog
    The rotation for these logs comes from the file /etc/rsyslog.conf. Those two files where the cause off the issue, so i removed the first one and waited until 00:00 for the rotation > Looks good now.
     
    Last edited: Mar 2, 2025
    till likes this.

Share This Page