Error Message during restart of rsyslog ( error starting up disk queue, using pure in-memory mode)

Products

• VMware Telco Cloud Automation

Issue/Introduction

• Configured rsyslog.conf to forward the logs to syslog server.
• Configuration setting as below.

 root@test[ ~ ]# cat /etc/rsyslog.conf
*.* action(type="omfwd"
       queue.type="LinkedList"
       queue.filename="queue_"
       action.resumeRetryCount="-1"
       queue.saveonshutdown="on"
       Target="192.0.2.1" Port="514" Protocol="tcp")

• Upon restarting/reloading your rsyslog daemon on a remote host, you see the following in your logs:

Jan 21 00:00:04 dev-tb-5c2bcmair0001v.5gc.home systemd[1]: Started System Logging Service.
Jan 21 00:00:04 dev-tb-5c2bcmair0001v.5gc.home rsyslogd[310776]: error starting up disk queue, using pure in-memory mode [v8.2306.0 try https://www.rsyslog.com/e/2036 ]
Jan 21 00:00:04 dev-tb-5c2bcmair0001v.5gc.home rsyslogd[310776]: action-0-builtin:omfwd queue: error creating disk queue - giving up. [v8.2306.0 try https://www.rsyslog.com>

 

 

Environment

photon 4.x

Cause

Parameter queue.filename="queue_" is defined in the configuration however the work directory is not set in the rsyslog.conf

Resolution

Follow the below workaround to fix the "creating disk queue " error

 

1. Add this line above "# Include configuration files from directory" in the /etc/rsyslog.conf

$WorkDirectory /var/spool/rsyslog

 

2. Run the below command 

sudo mkdir -p /var/spool/rsyslog

3. Restart the rsyslog