Michael, > -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Michael Biebl > >> > :programname, contains, "NetworkManager" > /var/log/NetworkManager.log > >> > ~ > >> Interesting fact is, that the above syntax worked fine with 4.4.2 > > > > I don't think so, you probably ignored (did not record?) the error > message. > > The tilde character is an action, and an action needs to be placed > after a > > filter. So a tilde character just on its own in a single line is > definitely a > > syntax error. The engine would not know what to do with such a line. > > > > If it generated no error in v4.4.2, *that* was a bug (will verify > later). > > It definitely worked with 4.4.2, i.e. the > NetworkManager/wpa_supplicant messages were discarded.
I used a Debian 5 I had available here, ran apt-get update/upgrade and compiled rsyslog 4.4.2 from scratch. Then I entered the first line into the config and restarted rsyslog. After doing so, I had the relevant errors in /var/log/syslog. Two observations: a) the commands were flagged as invalid by 4.4.2 b) error messages are logged (at least up to 4.4.2) Note that I had the statements directly in my main config. Can you verify you get the error messages, too, when you have them directly in the main config? I'll now see if v5 does not emit the messages... Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
