2010/1/15 Rainer Gerhards <[email protected]>: > Michael, > >> -----Original Message----- >> From: [email protected] [mailto:rsyslog- >> [email protected]] On Behalf Of Michael Biebl >> >> > :programname, contains, "NetworkManager" >> /var/log/NetworkManager.log >> >> > ~ >> >> Interesting fact is, that the above syntax worked fine with 4.4.2 >> > >> > I don't think so, you probably ignored (did not record?) the error >> message. >> > The tilde character is an action, and an action needs to be placed >> after a >> > filter. So a tilde character just on its own in a single line is >> definitely a >> > syntax error. The engine would not know what to do with such a line. >> > >> > If it generated no error in v4.4.2, *that* was a bug (will verify >> later). >> >> It definitely worked with 4.4.2, i.e. the >> NetworkManager/wpa_supplicant messages were discarded. > > I used a Debian 5 I had available here, ran apt-get update/upgrade and > compiled rsyslog 4.4.2 from scratch. Then I entered the first line into the > config and restarted rsyslog. > > After doing so, I had the relevant errors in /var/log/syslog. > > Two observations: > > a) the commands were flagged as invalid by 4.4.2 > b) error messages are logged (at least up to 4.4.2)
Yeah, false alarm from my side, sorry. 4.4.2 writes an error message about using incorrect syntax and the log messages are not dropped when using a simple "~". Everything as it should be :-) So this was all a red herring. The real problem, as you already noticed, the non-working pipe which causes 5.3.6 to hang and not process any further message. Michael -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth? _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
