Hi Botond
Thanks for the fast answer,
I tried your suggestion
<Input backend01>
Module im_file
File "/opt/app/weblogic/tools/production/nxlog/sample.log"
# InputType multiline
SavePos FALSE
ReadFromLast FALSE
Exec if $test =~ /^\d{2}/ { log_info("ok"); }
</Input>
It doesn't crash but it cannot parse it.
Logs:
/opt/csw/bin/sparcv9/nxlog-processor -v -c nxlog.conf
2014-03-31 09:03:37 DEBUG reading config cache from
/opt/app/weblogic/tools/production/nxlog/data/configcache.dat
2014-03-31 09:03:37 DEBUG read config cache item:
backend01//opt/app/weblogic/tools/production/nxlog/sample.log=0
2014-03-31 09:03:37 DEBUG Setting up module 'backend01' using im_file
2014-03-31 09:03:37 DEBUG module backend01 has 1 exported functions
2014-03-31 09:03:37 DEBUG registering function file_name
2014-03-31 09:03:37 DEBUG function 'file_name' registered
2014-03-31 09:03:37 DEBUG module backend01 has 0 exported procedures
2014-03-31 09:03:37 DEBUG FlowControl enabled for backend01
2014-03-31 09:03:37 DEBUG Setting up module 'out' using om_file
2014-03-31 09:03:37 DEBUG module out has 2 exported functions
2014-03-31 09:03:37 DEBUG registering function file_name
2014-03-31 09:03:37 DEBUG function 'file_name' registered
2014-03-31 09:03:37 DEBUG registering function file_size
2014-03-31 09:03:37 DEBUG function 'file_size' registered
2014-03-31 09:03:37 DEBUG module out has 2 exported procedures
2014-03-31 09:03:37 DEBUG registering procedure rotate_to
2014-03-31 09:03:37 DEBUG procedure 'rotate_to' registered
2014-03-31 09:03:37 DEBUG registering procedure reopen
2014-03-31 09:03:37 DEBUG procedure 'reopen' registered
2014-03-31 09:03:37 DEBUG CONFIG: backend01
2014-03-31 09:03:37 DEBUG appending
[/opt/app/weblogic/tools/production/nxlog/sample.log] to [(null)]
2014-03-31 09:03:37 DEBUG literal
2014-03-31 09:03:37 DEBUG parsed expression
2014-03-31 09:03:37 DEBUG nx_expr_new_field: test
2014-03-31 09:03:37 DEBUG regexpquote start
2014-03-31 09:03:37 DEBUG regexp: append [^]
2014-03-31 09:03:37 DEBUG appending [^] to [(null)]
2014-03-31 09:03:37 DEBUG regexp: append [\d{2}]
2014-03-31 09:03:37 DEBUG appending [\d{2}] to [^]
2014-03-31 09:03:37 DEBUG regexpquote end
2014-03-31 09:03:37 DEBUG regexp literal
2014-03-31 09:03:37 DEBUG new regexp: /^\d{2}/
2014-03-31 09:03:37 ERROR [modules.c:402/nx_ctx_config_modules()]
-;[module.c:1392/nx_module_parse_exec_block()] Couldn't parse Exec block at
nxlog.conf:22;[expr-grammar.y:328/parser_do()] couldn't parse statement at line
22, character 25 in nxlog.conf;[expr.c:2122/nx_expr_new_regexp()] ### ASSERTION
FAILED at line 2122 in expr.c/nx_expr_new_regexp(): "size > 0" ###
Line 25 is the exec command - column 25 will be d character
Exec if $test =~ /^\d{2}/ { log_info("ok"); }
________________________________
From: Botond Botyanszki <b...@nxlog.org>
To: nxlog-ce-users@lists.sourceforge.net
Sent: Friday, 28 March 2014, 18:30
Subject: Re: [nxlog-ce-users] Multiline regexp fails in Solaris
Hi Marius,
Thanks for providing the details. The "Bus Error" is likely caused by an
alignment issue. I have looked at the code but I can't fix this without
being able to test on sparc (currently only have intel solaris at hand).
Can you test if the regexp works in other forms such as the following:
<Input input1>
Module im_file
File "sample.log"
SavePos FALSE
ReadFromLast FALSE
Exec if $test =~ /^\d{2}/ log_info("ok");
</Input>
Regards,
Botond
On Fri, 28 Mar 2014 09:53:02 -0700 (PDT)
Marius Cojocaru <marius...@yahoo.com> wrote:
> Hello
>
> I have the following multiline configuration
>
> <Extension multiline>
> Modulexm_multiline
> HeaderLine /^\d{2}/
> </Extension>
>
> <Input input1>
> Module im_file
> File "sample.log"
> InputType multiline
> SavePos FALSE
> ReadFromLast FALSE
> </Input>
>
>
>
> <Output out>
> Moduleom_file
> File"output.log"
> Exec$raw_event = "--------------------------------------\r\n" +
> $raw_event;
> </Output>
>
>
> When I launch nxlog on it I get core dump and process dies
>
> 2014-03-28 17:43:39 DEBUG Setting up module 'multiline' using xm_multiline
> 2014-03-28 17:43:39 DEBUG Setting up module 'backend01' using im_file
> 2014-03-28 17:43:39 DEBUG module backend01 has 1 exported functions
> 2014-03-28 17:43:39 DEBUG registering function file_name
> 2014-03-28 17:43:39 DEBUG function 'file_name' registered
> 2014-03-28 17:43:39 DEBUG module backend01 has 0 exported procedures
> 2014-03-28 17:43:39 DEBUG FlowControl enabled for backend01
> 2014-03-28 17:43:39 DEBUG Setting up module 'out' using om_file
> 2014-03-28 17:43:39 DEBUG module out has 2 exported functions
> 2014-03-28 17:43:39 DEBUG registering function file_name
> 2014-03-28 17:43:39 DEBUG function 'file_name' registered
> 2014-03-28 17:43:39 DEBUG registering function file_size
> 2014-03-28 17:43:39 DEBUG function 'file_size' registered
> 2014-03-28 17:43:39 DEBUG module out has 2 exported procedures
> 2014-03-28 17:43:39 DEBUG registering procedure rotate_to
> 2014-03-28 17:43:39 DEBUG procedure 'rotate_to' registered
> 2014-03-28 17:43:39 DEBUG registering procedure reopen
> 2014-03-28 17:43:39 DEBUG procedure 'reopen' registered
> 2014-03-28 17:43:39 DEBUG CONFIG: multiline
> Bus Error (core dumped)
>
> Checking the dump stack trace looks like failing in pcre_fullinfo
>
>
> pstack core_dacly1_nxlog_2231_754_1396005073_5345
> core 'core_dacly1_nxlog_2231_754_1396005073_5345' of 5345:
> /opt/csw/bin/sparcv9/nxlog -c process.conf
> ffffffff7ea3c114 pcre_fullinfo (10012cc11, 0, 10012cc28, 80808080,
> 1001284d0, 1001218c0) + 10c
> ffffffff7d501acc xm_multiline_config (10013a880, 108400, 10012cbb8,
> ffffffff7d502cd0, ffffffff7d5031b8, ffffffff7d502d70) + 2fc
> ffffffff7ec1debc nx_module_config (10013a880, 1000099e8, 10, 726f7574,
> 80808080, ffffffff7ed4ce40) + 64
> 00000001000099f8 nx_ctx_config_modules (10011d470, ffffffff7ec3dba0,
> 1001218c0, ffffffff7fffdf20, 10013a7a0, 1001218c0) + 208
> 000000010000aed4 main (10000c, 1, 1117e, 10000c000, 10000d938, 10011b648) +
> 46c
> 0000000100003efc _start (0, 0, 0, 0, 0, 0) + 7c
>
> Solaris version: Solaris 10 10/08 s10s_u6wos_07b SPARC
> I used nxlog package from here
> https://www.opencsw.org/qa/package/nxlog_ce/
>
> so version: 2.5.1089,REV=2013.08.31
>
> In windows same config works but using latest version.
>
>
> Regards
> Marius
------------------------------------------------------------------------------
_______________________________________________
nxlog-ce-users mailing list
nxlog-ce-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users------------------------------------------------------------------------------
_______________________________________________
nxlog-ce-users mailing list
nxlog-ce-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
