File has been truncated
This is not a real error but rather a warning message. Most probably it occurs when monitoring files with imfile and “reopenOnTruncate” has been set to “on”. In this case, it indicates truncation of the file has been detected, and as such imfile begins to read it’s content from the beginning again.
Please see the imfile documentation for limitations of truncation processing.
rsyslog error 51 [warning]
When I try to connect rsyslog with cloud hosted elasticsearch service with https option enabled in conf (usehttps=\”on\”)
I am receiving below error
root@HP-Laptop-15-bs0xx:/etc# tail -f /var/log/rsyslog.log
Dec 6 09:52:10 HP-Laptop-15-bs0xx rsyslogd: message repeated 2 times: [omelasticsearch: error in elasticsearch reply: bulkmode insert does not return array, reply is: {\”error\”:{\”root_cause\”:[{\”type\”:\”security_exception\”,\”reason\”:\”action [indices:data/write/bulk] requires authentication\”,\”header\”:{\”WWW-Authenticate\”:[\”Bearer realm=\\\”security\\\”\”,\”Basic realm=\\\”security\\\” charset=\\\”UTF-8\\\”\”]}}],\”type\”:\”security_exception\”,\”reason\”:\”action [indices:data/write/bulk] requires authentication\”,\”header\”:{\”WWW-Authenticate\”:[\”Bearer realm=\\\”security\\\”\”,\”Basic realm=\\\”security\\\” charset=\\\”UTF-8\\\”\”]}},\”status\”:401} [v8.39.0 try http://www.rsyslog.com/e/2218 ]]
Any one has any idea ,how can I resolve this error ?