I ran into similar problems when upgrading and it was AppArmor that was the cause for me.
I tried chasing all the paths etc. that Rsyslog was using when integrated with LibreNMS and gave up.
The solution for me was to disable AppArmor for rsyslogd using: sudo aa-disable /path/to/rsyslogd
HTH,
Roger