Error: Failed to detect code [LlsNLK7sLm2bxuWS4WvQHdFT3OqCk] in SYSLOG_LOG [/var/log/messages]

[Spirogg]

I recently had this issue on a new server installing AlmaLinux 8.5 minimal and then cPanel

I guess during OS install - AlmaLinux Minimal did not install rsyslog for some reason or not.

UPDATE 02/05/2022 3:21am:

Note: The rsyslog package does not come by default on AlmaLinux installations
so new installed AlmaLinux servers you need to install rsyslog

So I had installed CSF as always and then found this out because I set RESTRICT_SYSLOG = 3
(3 = Restrict syslog/rsyslog access to RESTRICT_SYSLOG_GROUP ** RECOMMENDED **)

Then I started getting email errors about every 10 mins. or so

EMAIL ERRORS I WAS GETTING

Time: Fri Feb 4 04:25:42 2022 -0600
Error: Failed to detect code [LlsNLK7sLm2bxuWS4WvQHdFT3OqCk] in SYSLOG_LOG [/var/log/messages]

SYSLOG may not be running correctly on server1.mydomain .tld

- So I did a little searching after trying to restart it

[[email protected] ~]# /scripts/restartsrv_rsyslog
warn [restartsrv_rsyslog] The system is unable to find systemd configuration for the 'rsyslog' service...
(XID g224zj) The “rsyslog” service is disabled.

- But it showed Service is Disabled...
So then I installed it and started it, by using terminal

execute these lines below.

begin the install:

# dnf install rsyslog

then select : y  when your prompted in terminal and click enter key.

then start syslog:

# systemctl start rsyslog

Finally restart :

# /scripts/restartsrv_rsyslog

DONE!

Here is the output of installing and starting rsyslog

[[email protected] ~]# dnf install rsyslog
Last metadata expiration check: 0:00:20 ago on Fri 04 Feb 2022 04:42:11 PM CST.
Dependencies resolved.
==============================================================================================================================================
Package                           Architecture                 Version                                 Repository                       Size
==============================================================================================================================================
Installing:
rsyslog                           x86_64                       8.2102.0-5.el8                          appstream                       751 k
Installing dependencies:
libestr                           x86_64                       0.1.10-1.el8                            appstream                        27 k
libfastjson                       x86_64                       0.99.9-1.el8                            appstream                        37 k
logrotate                         x86_64                       3.14.0-4.el8                            baseos                           85 k

Transaction Summary
==============================================================================================================================================
Install  4 Packages

Total download size: 900 k
Installed size: 2.6 M
Is this ok [y/N]: y
Downloading Packages:
(1/4): logrotate-3.14.0-4.el8.x86_64.rpm                                                                      3.0 MB/s |  85 kB     00:00
(2/4): libfastjson-0.99.9-1.el8.x86_64.rpm                                                                    1.1 MB/s |  37 kB     00:00
(3/4): libestr-0.1.10-1.el8.x86_64.rpm                                                                        770 kB/s |  27 kB     00:00
(4/4): rsyslog-8.2102.0-5.el8.x86_64.rpm                                                                      9.3 MB/s | 751 kB     00:00
----------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                         2.1 MB/s | 900 kB     00:00
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                      1/1
  Installing       : libfastjson-0.99.9-1.el8.x86_64                                                                                      1/4
  Running scriptlet: libfastjson-0.99.9-1.el8.x86_64                                                                                      1/4
  Installing       : libestr-0.1.10-1.el8.x86_64                                                                                          2/4
  Running scriptlet: libestr-0.1.10-1.el8.x86_64                                                                                          2/4
  Running scriptlet: logrotate-3.14.0-4.el8.x86_64                                                                                        3/4
  Installing       : logrotate-3.14.0-4.el8.x86_64                                                                                        3/4
  Installing       : rsyslog-8.2102.0-5.el8.x86_64                                                                                        4/4
  Running scriptlet: rsyslog-8.2102.0-5.el8.x86_64                                                                                        4/4
  Verifying        : logrotate-3.14.0-4.el8.x86_64                                                                                        1/4
  Verifying        : libestr-0.1.10-1.el8.x86_64                                                                                          2/4
  Verifying        : libfastjson-0.99.9-1.el8.x86_64                                                                                      3/4
  Verifying        : rsyslog-8.2102.0-5.el8.x86_64                                                                                        4/4

Installed:
  libestr-0.1.10-1.el8.x86_64      libfastjson-0.99.9-1.el8.x86_64      logrotate-3.14.0-4.el8.x86_64      rsyslog-8.2102.0-5.el8.x86_64

Complete!
[[email protected] ~]# systemctl start rsyslog
[[email protected] ~]# /scripts/restartsrv_rsyslog
Waiting for “rsyslog” to restart ………waiting for “rsyslog” to initialize ………finished.

Service Status
        rsyslog (/usr/sbin/rsyslogd -n) is running as root with PID 68633 (systemd+/proc check method).

Startup Log
        Feb 04 16:43:01 server1.domain.com systemd[1]: Starting System Logging Service...
        Feb 04 16:43:01 server1.domain.com rsyslogd[68633]: [origin software="rsyslogd" swVersion="8.2102.0-5.el8" x-pid="68633" x-info="https://www.rsyslog.com"] start
        Feb 04 16:43:01 server1.domain.com rsyslogd[68633]: imjournal: journal files changed, reloading...  [v8.2102.0-5.el8 try https://www.rsyslog.com/e/0 ]
        Feb 04 16:43:01 server1.domain.com systemd[1]: Started System Logging Service.

rsyslog restarted successfully.

PLEASE: Double check that rsyslog is checked WHM in Home>Service Configuration>Service Manager.

- you should see a check mark on the first box to the left

(x) ()

rsyslog System Logger Daemon Enhanced System Logger Daemon

That's it...

SO Far SO Good no Email Errors reported.

I hope this my help someone else having this issue

Kind Regards
Spiro

 

[cPRex]

Thanks for posting this. Nothing in cPanel requires it, so we don't force it to be there. We have some more details on this here:

https://support.cpanel.net/hc/en-us/articles/4402584851479-The-cPanel-installer-does-not-install-require-syslog-if-it-is-missing

 

[tyuuu]

Hello,

when new installing cpanel now,
will rsyslog be installed by defaut ?
or should we run yum install rsyslog to install it manually ?

thanks

 

[Spirogg]

Hello,

when new installing cpanel now,
will rsyslog be installed by defaut ?
or should we run yum install rsyslog to install it manually ?

thanks

I think you need to install it with AlmaLinux As l did above.

 

[tyuuu]

Hi,

i install cloudlinux 8 and cpanel.

because i ever install centos 7 with cpanel,
never have the issue,
so,i wonder if it is cloudlinux or cpanel's issue,
or centos 8 also does not have it installed.

thanks

 

[Spirogg]

Hi,

i install cloudlinux 8 and cpanel.

because i ever install centos 7 with cpanel,
never have the issue,
so,i wonder if it is cloudlinux or cpanel's issue,
or centos 8 also does not have it installed.

thanks

Yes couldlinux 8 and AlmaLinux 8 They don’t install it. Not cPanel

 

[cPRex]

Just to add some clarification, rsyslog is not a package that is provided by cPanel as that is controlled by the operating system.