Portal Home > Knowledgebase > Technical Questions > Error: Failed to detect code [xnxnxnx] in SYSLOG_LOG [/var/log/messages]

Error: Failed to detect code [xnxnxnx] in SYSLOG_LOG [/var/log/messages]

The root cause of the issue is a current known bug with the imjournal module for rsyslog that prevents it from logging properly, which then confuses lfd with the data being entered by the module.  More info on the bug here: https://bugzilla.redhat.com/show_bug.cgi?id=1088021

First step: reboot your server. This may clear up the issue. Note that only one reboot is necessary; if one reboot does not fix the problem, multiple subsequent reboots will not fix it either.

There are two options for resolution:

  1. Set rsyslog to log the systemd journal messages to files instead of via syslog (recommended):
    • Edit /etc/rsyslogd.conf with your favorite editor, adjust the following:
      • Comment $ModLoad imjournal 
      • Comment $IMJournalStateFile imjournal.state
      • Change $OmitLocalLogging from "on" to "off"
      • Save the file
    • Restart rsyslogd with the following: /usr/local/cpanel/scripts/restartsrv rsyslogd
    • Confirm a success messagefrom the restart command
  2. Disable syslog checking in LFD (not recommended, but easier; perform at your own risk):
    • Edit /etc/csf/csf.conf with yor favorite editor, adjust the following:
      • Change SYSLOG_CHECK  from 1 to 0
      • Save the file
    • Restart LFD with the following: systemctl restart lfd
    • Confirm a success from the restart command. 
Was this answer helpful?
Why can't I clear RAM cache or buffers on Linux VPS?

You do not need to clear your RAM cache. Linux has many decades of excellent memory management...

Unable to launch Docker swarm due to br_netfilter messages

When receiving the following message:"error creating external connectivity network: cannot...

Control panel shows memory usage higher than my free -m. What gives?

Control panel shows the cached memory as used as well. Your free -m shows the actual result.To...

ufw is not starting and returning nf_conntrack_ftp module not found

You may receive the following error message while trying to enable ufw (ufw enable):ERROR:...

Can I use Mailcow on Linux VPS?

Unfortunately, you cannot use Mailcow on Linux VPS line. Their maintainers have no interest in...