rsyslog

Error occured during socket rcv operation.

This error code indicates that there was a problem receiving from the remote host. Check network connectivity to see if there is a physical problem. This can especially occur if there is a partly-functioning network component.

This is a stub entry: If you have questions please post a comment or visit the github issue tracker.

Epol_ctll() returned with an unexpected error code.

This is a problem that usually should not occur. It happens, when the epoll_ctl API fails. One probable cause is that rsyslog was build on a newer kernel than the running kernel. If this is the cause, a correction is available in 5.7.10 and above. If you see this error under other circumstances, please post a description of your environment and what you see to the attached discussion thread. We would really love to sort out reasons if this problem still exists.

This is a stub entry: If you have questions please post a comment or visit the github issue tracker.

Parser with the specified name was not found.

This is a stub entry: If you have questions please post a comment or visit the github issue tracker.

No ruleset name as specified where one was needed.

This error happens if no ruleset is specified when a plugin needs one to function properly. This usually happens with omruleset, which needs to have the name of the ruleset to submit to. Note that in recent versions of rsyslog, omruleset has been superseded by the better “call” statement.

Some versions of mmnormalize also emit this error. In that case, what actually is missing is the normalization (sample) database.

This is a stub entry: If you have questions please post a comment or visit the github issue tracker.

A required ruleset could not be found! Please check your configuration.

This is a stub entry: If you have questions please post a comment or visit the github issue tracker.

We were instructed to create a new ruleset queue, but one already exists.

The user tries to specify multiple ruleset queues, which is impossible. The $rulesetcreatemainqueue parameter is given multiple times for the same ruleset. Remove all but one.

This is a stub entry: If you have questions please post a comment or visit the github issue tracker.

Thread was forced to terminate by bShallShutdown, a state, not an error.

This is a stub entry: If you have questions please post a comment or visit the github issue tracker.

Error initializing libnet, e.g. because not running as root.

This happens with omudpspoof, usually when privileges have been dropped, what is not possible with this module. See omudpspoof.

This is a stub entry: If you have questions please post a comment or visit the github issue tracker.

Some problems with handling the Solaris door functionality.

This is a stub entry: If you have questions please post a comment or visit the github issue tracker.

Error opening or reading the kernel log socket (primarily solaris).

This is a stub entry: If you have questions please post a comment or visit the github issue tracker.