Just a quick thought: The double quotes in "WARNING" are invalid. Double quotes are reserved for future functionality not yet implemented. Use single quotes 'WARNING'. This may or may not be the solution.
HTH Rainer > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of > Kanwar Ranbir Sandhu > Sent: Thursday, May 28, 2009 9:04 PM > To: [email protected] > Subject: [rsyslog] snmp traps > > Hello All, > > This is my first post to the list - yeah! :) > > I'm trying to use the snmp support in rsyslog to generate traps for > specific syslog messages. Here's the filter I'm using: > > if $syslogfacility-text == 'local6' and $syslogseverity-text == > "WARNING" then :omsnmp: > > This is all on one line in the actual config. > > When I reload/restart rsyslog, it complains: > > syslogd: the last error occured in /etc/rsyslog.conf, line 76 > > I have the module loading, and I've set the trap community > and trap host > parameters. I don't see any errors for those, so I've > assumed I've done > that bit right. > > I don't see what's wrong with my filter. Am I using the snmp feature > correctly? That is, I can I use snmp in an expression based filter? > > My rsyslog version is 3.21.10 on CentOS 5 host (I've rebuilt > it from the > Fedora 10 rsyslog package). > > Thanks, > > Ranbir > > -- > Kanwar Ranbir Sandhu > Linux 2.6.27.21-170.2.56.fc10.x86_64 x86_64 GNU/Linux > 14:57:23 up 4 days, 16:07, 4 users, load average: 1.22, 0.55, 0.24 > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
