rsyslog error 3003

Invalid config command

This error occurs when either an invalid configuration command is part of rsyslog.con or when the command is valid, but resides in a not-yet-loaded plugin.

To use commands provided by plugins, the plugin must be loaded first (via $ModLoad). Only after that the command can be used.

This error may also be caused by a module load failure. Be sure to check error messages before this one, they may point you into the right direction. Please note that this message should be followed by another one which tells you on which line of rsyslog.conf the problem occurred.

Sample Data:
2008-06-27T12:29:44.828434+02:00 machine.example.net rsyslogd-3003:invalid or yet-unknown config file command – have you forgotten to load a module? [try http://www.rsyslog.com/e/3003 ]

This is a stub entry: If you have questions please post a comment or visit the github issue tracker.

rsyslog error 2420

Imfile file name contains wildcard, which may be problematic.

This message tells the user that a state file is specified for an imfile input which uses wildcards. This is usually an extremely bad idea, as the state file becomes corrupted if multiple files match the wildcard. The option primarily exist for exotic use cases and it is strongly recommended not to specify state file names in this setup.

For more details check the documentation

This is a stub entry: If you have questions please post a comment or visit the github issue tracker.

rsyslog error 2359

Status: action was resumed (used for reporting).

This means a previously suspended action has recovered. Recovery happens e.g. when the action can reconnect to a server or some resource starvation is solved. This is an informational message telling you rsyslog now executes the action again.

Note: due to a bug in old rsyslog versions (e.g. 8.24.0) an “action was suspended” message is not necessarily reported. Thus the resumption message may be the only way to detect something went wrong. Version 8.1904.0 and above will much more reliably report action suspension.

If you have questions please post a comment or visit the github issue tracker.

Scroll to top