> -----Original Message-----
> From: [email protected] [mailto:rsyslog-
> [email protected]] On Behalf Of Michael Biebl
> Sent: Friday, January 15, 2010 2:45 PM
> To: rsyslog-users
> Subject: Re: [rsyslog] rsyslog 5.3.6 (v5-beta) released
> 
> 2010/1/15 Rainer Gerhards <[email protected]>:
> >> -----Original Message-----
> >> From: [email protected] [mailto:rsyslog-
> >> [email protected]] On Behalf Of Michael Biebl
> >> Sent: Friday, January 15, 2010 8:42 AM
> >> To: rsyslog-users
> >> Subject: Re: [rsyslog] rsyslog 5.3.6 (v5-beta) released
> >>
> >> 2010/1/15  <[email protected]>:
> >>
> >> > I think I just realized the problem
> >> >
> >> > you have
> >> >
> >> > :programname, contains, "NetworkManager"
> /var/log/NetworkManager.log
> >> > ~
> >> > :programname, contains, "wpa_supplicant"
> /var/log/NetworkManager.log
> >> > ~
> >> >
> >> > when you should have
> >> >
> >> > :programname, contains, "NetworkManager"
> /var/log/NetworkManager.log
> >> > & ~
> >> > :programname, contains, "wpa_supplicant"
> /var/log/NetworkManager.log
> >> > & ~
> >> >
> >> > give that a shot.
> >>
> >> The error message goes away but rsyslog still logs nothing.
> >>
> >> Interesting fact is, that the above syntax worked fine with 4.4.2
> >
> > I don't think so, you probably ignored (did not record?) the error
> message.
> > The tilde character is an action, and an action needs to be placed
> after a
> > filter. So a tilde character just on its own in a single line is
> definitely a
> > syntax error. The engine would not know what to do with such a line.
> >
> > If it generated no error in v4.4.2, *that* was a bug (will verify
> later).
> 
> It definitely worked with 4.4.2, i.e. the
> NetworkManager/wpa_supplicant messages were discarded.
> 
> Will have to check if rsyslog wrote any error message in the syslog.

OK, thanks, will see where the bug in v4 is. I am right now setting up a new
Debian test env, it's probaly easiest to find the issues using the same
platform as you :)

Rainer
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com

Reply via email to