Hi, You should be able to use parsedate() with this date format instead of strptime: $EventTime = parsedate($1); Do you get the same error without strptime() ? I'm asking because the assertion failure error is not directly related to this. Posting your full config might help in that case.
Regards, Botond On Wed, 11 Sep 2013 12:43:19 +0200 Aurélien BOUVARD <[email protected]> wrote: > Hi all , > I 'm actually analyze many logs from our SI (oracle , windows , disk...) and > i'm trying now to take some logs of our Oracle RAC infrastructure > This an example of a Oracle RAC log called "ocssd" > 2013-05-31 > 09:14:59.695<SEP>../rac1/agent/ohasd/orarootagent_root/orarootagent_root.l01<SEP> > [ USRTHRD][1102350656] {0:0:2} Thread:[DaemonCheck:crf]Skipping Agent > Initiated a check action > It's not multiline in our case > > So , at the beginning, i simply decided to use this procedure : > <Input ocssdlog> > Module im_file > InputType LineBased > File 'C:\simuocssd.log' > Exec $Message = $raw_event; $Sourcename = 'OCSSDLOG';</Input>and after , send > it over tcp with "to_syslog_ietf style" by the way , it works well but now i > would like to replace timestamp date by parsing the date of message with this > : (as seen in the documentation part 9.12.1) -----------------Exec if > $raw_event =~ /^([ CSSD](\d\d\d\d-\d\d-\d\d\s\d\d\:\d\d:\d\d.\d\d\d) > ([\d+]) > (\S+))/\ > {\ > $EventTime = strptime($1,'%F%t%T');\ }------------------but , when i > restart nxlog , i obtain this kind of error message : > 2013-09-11 12:29:26 ERROR ### ASSERTION FAILED at line 843 in > module.c/resume_senders(): "j > 0" ### > 2013-09-11 12:29:27 INFO connecting to 192.168.152.208:514 > 2013-09-11 12:29:27 INFO reconnecting in 1 seconds > 2013-09-11 12:29:27 ERROR ### ASSERTION FAILED at line 843 in > module.c/resume_senders(): "j > 0" ### > 2013-09-11 12:29:28 INFO connecting to 192.168.152.208:514 > 2013-09-11 12:29:28 INFO reconnecting in 1 seconds > 2013-09-11 12:29:28 ERROR ### ASSERTION FAILED at line 843 in > module.c/resume_senders(): "j > 0" ### > Someone understand and could explain this error? it's the first i have this... > Regards, > ------------------------------------------------------------------------------ How ServiceNow helps IT people transform IT departments: 1. Consolidate legacy IT systems to a single system of record for IT 2. Standardize and globalize service processes across IT 3. Implement zero-touch automation to replace manual, redundant tasks http://pubads.g.doubleclick.net/gampad/clk?id=51271111&iu=/4140/ostg.clktrk _______________________________________________ nxlog-ce-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
