Log file /var/log/rsyslog needs ownership of syslog:adm
/var/log/rsyslog
syslog:adm
Trace: • hdfs_fsck • faac • iterm • rsyslog