Rainer Gerhards

@kaizen1 thx - I had overlooked the early indeed. Will see what I can reproduce.

@alorbach can you share the test file of the potential reproucer? That way @kaizen1 could check if it matches what he has.

@kaizen1 any thoughs? Else I guess we can close this as "does not apply"?

basically implement and works good

Keep in mind that the execution environment is pretty different when rsyslog is run as a system process. I would guess that some SELinux or similar restrictions cause the issue...

I would suggest to create a script that outputs the details of the execution environment to an output file. Also include verbose debigging into your script, so that you can...

I have created a list of common causes and debugging techniques. You can follow it. If so, follow it closely :-) https://www.rsyslog.com/what-to-do-when-an-external-script-does-not-work/

look at what is stored inside kafka. I do not know the default template. However, you can specifiy yourself what is stored. Look into rsyslog templates. they can be user-defined,...

I've seen that but had not yet the time to test myself. I guess we run here into a border case, which we do not properly handle. I am not...

@shinigami35 also pls try changing the forwarding to just a plain writing to file (no forwarding). This is much quicker, and if it works as expected in the file case,...