Got some strange rsyslogd error-messages

Virtualmin
1

Operating system: Ubuntu
OS version: 20.04

I got this message in /var/log/syslog:

Dec  8 18:33:08 xst01 postfix/smtpd[1019215]: timeout after RSET from unknown[45.142.120.121]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' resumed (module 'builtin:omfile') [v8.2001.0 try https://www.rsyslog.com/e/2359 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2001.0 try https://www.rsyslog.com/e/2007 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' resumed (module 'builtin:omfile') [v8.2001.0 try https://www.rsyslog.com/e/2359 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2001.0 try https://www.rsyslog.com/e/2007 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' resumed (module 'builtin:omfile') [v8.2001.0 try https://www.rsyslog.com/e/2359 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2001.0 try https://www.rsyslog.com/e/2007 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' resumed (module 'builtin:omfile') [v8.2001.0 try https://www.rsyslog.com/e/2359 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2001.0 try https://www.rsyslog.com/e/2007 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' resumed (module 'builtin:omfile') [v8.2001.0 try https://www.rsyslog.com/e/2359 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2001.0 try https://www.rsyslog.com/e/2007 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' resumed (module 'builtin:omfile') [v8.2001.0 try https://www.rsyslog.com/e/2359 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2001.0 try https://www.rsyslog.com/e/2007 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' resumed (module 'builtin:omfile') [v8.2001.0 try https://www.rsyslog.com/e/2359 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2001.0 try https://www.rsyslog.com/e/2007 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' resumed (module 'builtin:omfile') [v8.2001.0 try https://www.rsyslog.com/e/2359 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2001.0 try https://www.rsyslog.com/e/2007 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' resumed (module 'builtin:omfile') [v8.2001.0 try https://www.rsyslog.com/e/2359 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2001.0 try https://www.rsyslog.com/e/2007 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' resumed (module 'builtin:omfile') [v8.2001.0 try https://www.rsyslog.com/e/2359 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), retry 0. There should be messages before this one giving the reason for suspension. [v8.2001.0 try https://www.rsyslog.com/e/2007 ]
Dec  8 18:33:08 xst01 rsyslogd: action 'action-6-builtin:omfile' suspended (module 'builtin:omfile'), next retry is Tue Dec  8 18:33:38 2020, retry nbr 0. There should be messages before this one giving the reason for suspension. [v8.2001.0 try https://www.rsyslog.com/e/2007 ]

What might be the cause of this?

2

Hi,

Have you upgraded from Ubuntu 18.04, I assume? Have a look at this thread. Albeit, this is not Virtualmin issue.

1 Like
3

Hey @Ilia,
thanks for your response. It isn’t an upgraded ubuntu, but an clean new installation of 20.04.
I’ve still found this posting before, but I’ve seen they notice this for version: 8.38.0, but my Version is 8.2001.0

aptitude show rsyslog returns:

Package: rsyslog
Version: 8.2001.0-1ubuntu1.1
State: installed
Automatically installed: yes
Priority: important
Section: admin
Maintainer: Ubuntu Developers ubuntu-devel-discuss@lists.ubuntu.com
Architecture: amd64
Uncompressed Size: 1695 k
Depends: libc6 (>= 2.27), libestr0 (>= 0.1.4), libfastjson4 (>= 0.99.7), libsystemd0 (>= 209), libuuid1 (>= 2.16), zlib1g (>= 1:1.1.4), adduser, ucf
PreDepends: init-system-helpers (>= 1.54~)
Recommends: logrotate
Suggests: rsyslog-mysql | rsyslog-pgsql, rsyslog-mongodb, rsyslog-doc, rsyslog-openssl | rsyslog-gnutls, rsyslog-gssapi, rsyslog-relp, apparmor (>= 2.8.96~2541-0ubuntu4~)
Conflicts: linux-kernel-log-daemon, linux-kernel-log-daemon:i386, system-log-daemon, system-log-daemon:i386
Provides: linux-kernel-log-daemon, system-log-daemon
Description: reliable system and kernel logging daemon
Rsyslog is a multi-threaded implementation of syslogd (a system utility providing support for message logging), with features that include:

  • reliable syslog over TCP, SSL/TLS and RELP
  • on-demand disk buffering
  • email alerting
  • writing to MySQL or PostgreSQL databases (via separate output plugins)
  • permitted sender lists
  • filtering on any part of the syslog message
  • on-the-wire message compression
  • fine-grained output format control
  • failover to backup destinations
  • enterprise-class encrypted syslog relaying

It is the default syslogd on Debian systems.
Homepage: http://www.rsyslog.com/

4

Ok, I’ve commented out those Settings which are in the link you posted above.
Now the messages are gone.

And now I see, that I have version 8.2001 … what a difference little dot can make!! :wink: I didn’t recognize that my version is round about 1970 minor-versions higher then the 8.30.
I’ve always read I had a 8.20.xx one. :woozy_face:

5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.