Turned out to be selinux. Logs were not helpful at all. Thanks for helping!
On Wed, Sep 16, 2020, 13:23 Lennard Klein via rsyslog < [email protected]> wrote: > >ARP The module is called imtcp, not imptcp ;) > Actually, both exist. > > >SC *Sep 15 10:15:36 HOSTNAME rsyslogd[24237]: activation of module imptcp > failed [v8.24.0-52.el7_8.2 try > https://urldefense.com/v3/__http:/www.rsyslog.com/e/2077__;!!PcPv50trKLWG!lNwBpglve15HXSxoxYSC8r-EG-AjxARNQZwgombitHNk_gGbh16clPsu3SgikOS0KASWpg$ > Apologies for the url-mangling, corporate security defenses are at work > here... > The link (https://www.rsyslog.com/?s=error+2077) however, might give you > some clues: the socket is failing to bind. At a guess, you either are > trying to bind to a socket that is already being listened on by some other > program, you have the same port in your configuration twice, or you already > have rsyslog running outside of the system service, which means you can't > have a second one listening on the same ports. > Although that last option really is just a specific version of the first > option. > > Looking at your output, I see multiple process ids called 'rsyslogd' > listening on ports, and in your systemd status only process 24237 is > listed. I'd recommend completely stopping all rsyslogd instances and > restarting it through systemd if you can afford to. > > Regards, > Lennard Klein > > > > This email is from Equinix (EMEA) B.V. or one of its associated companies > in the territory from where this email has been sent. This email, and any > files transmitted with it, contains information which is confidential, is > solely for the use of the intended recipient and may be legally privileged. > If you have received this email in error, please notify the sender and > delete this email immediately. Equinix (EMEA) B.V.. Registered Office: > Amstelplein 1, 1096 HA Amsterdam, The Netherlands. Registered in The > Netherlands No. 57577889. > _______________________________________________ > rsyslog mailing list > https://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
