could not load module rsyslog lmnsd_gtls.so

Solution 1:

Get the missing module by installing the rsyslog-gnutls package.

sudo apt-get install rsyslog-gnutls

see also http://virtuallyhyper.com/2013/06/install-splunk-and-send-logs-to-splunk-with-rsyslog-over-tcp-with-ssl/

see also http://help.papertrailapp.com/kb/configuration/encrypting-remote-syslog-with-tls-ssl

Check to see if the module file exists :

ls -la /usr/lib/rsyslog/lmnsd_gtls.so

Solution 2:

This happened with me when I was trying to set up syslog with tls certificate similar to this. Rsyslog in few of the systems start as root and then fall to user syslog. There is a possibility that the certificate is not readable by the syslog user.

Check it using:

sudo -H -u syslog bash -l -c 'less <path to the certificate>'

if you get Permission Denied, add read permissions for your syslog user, and restart rsyslog.