check directory permissions and check SELinux/AppArmor permissions.
We really aren't going to be able to make much better guesses without seeing the full config.
David Lang On Wed, 20 Apr 2022, Mike Michael via rsyslog wrote:
Date: Wed, 20 Apr 2022 14:44:15 -0400 From: Mike Michael via rsyslog <rsyslog@lists.adiscon.com> Reply-To: mike.mich...@dominionenterprises.com, rsyslog-users <rsyslog@lists.adiscon.com> To: rsyslog@lists.adiscon.com Cc: Mike Michael <mike.mich...@dominionenterprises.com> Subject: [rsyslog] Could not open dynamic file/Permission denied We astrated getting failures with rsyslog a few weeks back, and cannot find any evidence of any change being mader at that time. Long story short, inherited system, has been working/running for years, sans problems. I have checked forums/internet, checked permissions on the DIR where logs are stored, but again, no changes have been made, very minimal amount of folks have access. Logs stored on a Netapp, no changes or issues there. rsyslogd: Could not open dynamic file '/[path]/[date].log' [state -3000] - discarding message [v8.24.0-57.el7_9.2] rsyslogd: omfile: creating parent directories for file 'Permission denied' failed /[path]/[date].log [v8.24.0-57.el7_9.2] rsyslog.conf looks as such (PrivDropToUser/PrivDropToGroup added based on forums, was not there before) # rsyslog configuration file $umask 0000 $FileCreateMode 0660 $DirCreateMode 0755 $FileGroup *[ADMN GRP]* $PrivDropToUser * [ADMN USR]* $PrivDropToGroup *[ADMN GRP]* Not familiar with rsyslog, any insight appreciated. *__________________________________________Mike Michael* *Dominion Enterprises* *Non-disclosure and Confidentiality Disclaimer* This e-mail and any attachments thereto may contain confidential information and/or information protected by intellectual property rights for the exclusive attention of the intended addressees named above. If you have received this transmission in error, please immediately notify the sender by return e-mail and delete this message and its attachments. Unauthorized use, copying, printing, retention or further full or partial distribution of this e-mail or its contents is prohibited. _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
_______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.