9

The rsyslog module is showing up in system log /var/log/syslog as message repeated. rsyslog was also showing 99% cpu use in top at one point, possibly unrelated.

tail /var/log/syslog

Dec  1 22:18:16 here rsyslogd-2066: could not load module '/usr/lib/rsyslog/lmnsd_gtls.so', dlopen: /usr/lib/rsyslog/lmnsd_gtls.so: cannot open shared object file: No such file or directory
 [try http://www.rsyslog.com/e/2066 ]
Dec  1 22:18:56 here rsyslogd-2066: last message repeated 4 times

lsb_release -a

Description: Ubuntu 12.04.3 LTS Release: 12.04

sudo apt-cache showpkg rsyslog

Package: rsyslog Versions: 5.8.6-1ubuntu8.5

Related Question : How do I find that lmnsd_gtls.so is related to rsyslog-gnutls ?

14

Get the missing module by installing the rsyslog-gnutls package.

sudo apt-get install rsyslog-gnutls

see also http://virtuallyhyper.com/2013/06/install-splunk-and-send-logs-to-splunk-with-rsyslog-over-tcp-with-ssl/

see also http://help.papertrailapp.com/kb/configuration/encrypting-remote-syslog-with-tls-ssl

Check to see if the module file exists :

ls -la /usr/lib/rsyslog/lmnsd_gtls.so

1
  • It was /usr/lib/x86_64-linux-gnu/rsyslog/lmnsd_gtls.so on Ubuntu 18.04 – Pavel Chuchuva May 29 '19 at 7:06
1

This happened with me when I was trying to set up syslog with tls certificate similar to this. Rsyslog in few of the systems start as root and then fall to user syslog. There is a possibility that the certificate is not readable by the syslog user.

Check it using:

sudo -H -u syslog bash -l -c 'less <path to the certificate>'

if you get Permission Denied, add read permissions for your syslog user, and restart rsyslog.

-1

Dec 1 22:18:16 here rsyslogd-2066: could not load module '/usr/lib/rsyslog/lmnsd_gtls.so', dlopen: /usr/lib/rsyslog/lmnsd_gtls.so: cannot open shared object file: No such file or directory [try http://www.rsyslog.com/e/2066 ]

I have encountered recently above error, and the solution was to place certificates under /etc/rsyslog.d.

Reference: https://www.loggly.com/docs/rsyslog-tls-configuration/

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.