rsyslogd error message: sd_journal_get_cursor() failed: 'Cannot assign requested address...

Environment

• Red Hat Enterprise Linux 7
  • rsyslog-8.24.0-34.el7
• Red Hat Enterprise Linux 8
  • rsyslog-8.37.0-9.el8
  • rsyslog-8.37.0-13.el8

Issue

• On RHEL7, rsyslogd outputs error message: 'Cannot assign requested address' [v8.24.0-34.el7]
• On RHEL8, rsyslogd outputs error message: 'imjournal: sd_journal_get_cursor() failed: Cannot assign requested address [v8.37.0-9.el8]'

Resolution

• On Red Hat Enterprise Linux 7, this issue was being tracked in Bug 1632211, and it has been fixed with errata RHSA-2019:2110 in package rsyslog-8.24.0-38.el7 or later.

• On Red Hat Enterprise Linux 8, this same issue was found on rsyslog-8.37.0-9.el8. There is a code rebased for rsyslog from 8.37 to 8.1911 in Red Hat Enterprise Linux 8.2. That new version of rsyslog will have bugfix to this issue.

• If you still have the same problem after updating the rsyslog packages, please open a new support case with Red Hat Support.

• Workaround - https://www.rsyslog.com/doc/v8-stable/configuration/modules/imjournal.html#workaroundjournalbug :

  1\. Edit /etc/rsyslog.conf and comment out the following default entries.

      $ModLoad imjournal
      $IMJournalStateFile imjournal.state 

   2\. Add the following line.

      module(load="imjournal" StateFile="imjournal.state" WorkAroundJournalBug="on")

    3\. Restart the rsyslog service.

      systemctl restart rsyslog

Diagnostic Steps

• rsyslogd error message in /var/log/message:

rsyslogd: sd_journal_get_cursor() failed: 'Cannot assign requested address'  [v8.24.0-34.el7]
rsyslogd: imjournal: journal reloaded... [v8.24.0-34.el7 try http://www.rsyslog.com/e/0 ]

• Known scenarios:
  • system time change
  • rsyslogd reload / restart
  • journald log rotation