Rsyslog facility based selectors not working for Dovecot
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Dovecot |
New
|
Undecided
|
Unassigned | ||
rsyslog (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
Post system upgrade from 14.04.4 to 16.04.1, Rsyslog facility/priority based selectors are no longer working for Dovecot 2.2.22. For instance, "imap-login" events do not appear in the logfiles, while "lmtp" events, which in our case are captured using property-based filters, do.
/etc/rsyslog.
local5.* -/var/log/
local5.
:msg,contains,
:msg,contains,
& stop
/etc/dovecot/
log_path = syslog
syslog_facility = local5
auth_verbose = yes
The configuration has not been changed since it was last working, i.e. before the upgrade. Changing log_path directive in Dovecot from "syslog" to a valid file path is a working workaround:
/etc/dovecot/
log_path = /var/log/
Similar problem. Works under 14.04 not under 16.04.
>>16.04:
/etc/dovecot/ conf.d/ 10-logging. conf:
log_path = syslog
syslog_facility = local5
auth_verbose = yes
/etc/rsyslog. d/dovecot. conf :
local5. *;local5. !err -/var/log/ dovecot. log dovecot- debug.log info,local5. notice; local5. !warn;local5. !err;local5. !crit;local5. !alert; local5. !panic -/var/log/ dovecot- info.log dovecot- errors. log
local5.debug -/var/log/
local5.
local5.warn -/var/log/
$ sudo doveadm log find
Debug: /var/log/ dovecot- info.log dovecot- info.log dovecot. log dovecot. log dovecot. log
Info: /var/log/
Warning: /var/log/
Error: /var/log/
Fatal: /var/log/
>> 14.04 (using same configs above):
$ sudo doveadm log find
Looking for log files from /var/log dovecot- debug.log dovecot. log dovecot- info.log dovecot- debug.log dovecot. log dovecot- debug.log dovecot- errors. log dovecot. log dovecot- debug.log dovecot- errors. log dovecot- debug.log dovecot- errors. log
Debug: /var/log/
Debug: /var/log/
Info: /var/log/
Info: /var/log/
Info: /var/log/
Warning: /var/log/
Warning: /var/log/
Warning: /var/log/
Error: /var/log/
Error: /var/log/
Fatal: /var/log/
Fatal: /var/log/
(Correct)