Every few minutes rsyslog outputs - rsyslogd: action 'action 3' resumed (module 'builtin:omfile') [v8.32.0 try http://www.rsyslog.com/e/2359 ]

Solution 1:

There is a new version of rsyslog -> swVersion="8.38.0"

As you can see on rsylog homepage https://www.rsyslog.com/doc/v8-stable/configuration/modules/omfile.html some parameters are obsolete.

Unfortunately they have not been removed from the config file.

Open /etc/rsyslog.conf and comment or remove the following lines.

#
# Set the default permissions for all log files.
#
#$FileOwner syslog
#$FileGroup adm
#$FileCreateMode 0640
#$DirCreateMode 0755
#$Umask 0022
#$PrivDropToUser syslog
#$PrivDropToGroup syslog