Michael, I could reproduce the original bug report, now a bugzilla entry:
http://bugzilla.adiscon.com/show_bug.cgi?id=169 I guess you don't see any entries in /var/log/syslog simply because rsyslog hangs and so is unable to process any further message. I suggest you subscribe to the bug in bugzilla. Rainer > -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Rainer Gerhards > Sent: Friday, January 15, 2010 3:24 PM > To: rsyslog-users > Subject: Re: [rsyslog] rsyslog 5.3.6 (v5-beta) released > > Michael, > > > -----Original Message----- > > From: [email protected] [mailto:rsyslog- > > [email protected]] On Behalf Of Michael Biebl > > >> > :programname, contains, "NetworkManager" > > /var/log/NetworkManager.log > > >> > ~ > > >> Interesting fact is, that the above syntax worked fine with 4.4.2 > > > > > > I don't think so, you probably ignored (did not record?) the error > > message. > > > The tilde character is an action, and an action needs to be placed > > after a > > > filter. So a tilde character just on its own in a single line is > > definitely a > > > syntax error. The engine would not know what to do with such a > line. > > > > > > If it generated no error in v4.4.2, *that* was a bug (will verify > > later). > > > > It definitely worked with 4.4.2, i.e. the > > NetworkManager/wpa_supplicant messages were discarded. > > I used a Debian 5 I had available here, ran apt-get update/upgrade and > compiled rsyslog 4.4.2 from scratch. Then I entered the first line into > the > config and restarted rsyslog. > > After doing so, I had the relevant errors in /var/log/syslog. > > Two observations: > > a) the commands were flagged as invalid by 4.4.2 > b) error messages are logged (at least up to 4.4.2) > > Note that I had the statements directly in my main config. Can you > verify you > get the error messages, too, when you have them directly in the main > config? > > I'll now see if v5 does not emit the messages... > > Rainer > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
