rsyslogd logs an error that is seemingly unfixable. rsyslogd[452925]: imjournal: filecreatemode is not set, using default 0644 [v8.2306.0-1.fc38 try https://www.rsyslog.com/e/2186 ] See also: under RedHat Customer portal... Imjournal module ignores $FileCreateMode parameter even though it says " Solution Verified - Updated June 12 2023 at 10:43 AM" I can't see that. Red Hat Bugzilla – Bug 2181560 & Red Hat Bugzilla – Bug 2181559 Reproducible: Always Steps to Reproduce: 1. restart rsyslog 2. No messing with /etc/rsyslog.conf or /usr/lib/systemd/system/rsyslog.service permissions seems to remove the error. 3. Actual Results: imjournal: filecreatemode is not set, using default 0644 [v8.2306.0-1.fc38 try https://www.rsyslog.com/e/2186 ] Expected Results: No error Or Ability to silence the error or set appropriate permissions.
To silence the error, you can set the filecreatemode module parameter for the imjournal module.
Where & how - I've tried many permutations in many places. Can that not be a default in the distributed config file? (Wherever that might be?)
Just change module(load="imjournal" StateFile="imjournal.state") To module(load="imjournal" StateFile="imjournal.state" filecreatemode="some file mode that is suitable for you, e.g. 0600 but don't forget to set the appropriate permission for the file as well if you've already created it")
OK. Can whatever the current default is (or better 0640) be placed in the rsyslog.conf file in the future? It seems unreasonable to leave such an error as the default.
See https://github.com/rsyslog/rsyslog/pull/5109 for detailed discussion and what is recommended.