Hi James, this looks like a problem inside the status message code. If you do not need these messages, a simple work-around is to use
$LogRsyslogStatusMessages off on the remote machines. Also not that by using %hostname% plainly, some invalid sequences may be injected by remote systems. The secpath-drop and secpath-replace options may be used to handle slashes within hostname, e.g. %hostname:::secpath-replace% (See http://www.rsyslog.com/doc-property_replacer.html ) Another alternative is to use fromhost-ip, which is NOT take from the message, but thus only works correctly in non-relay environments. HTH Rainer > -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of James Corteciano > Sent: Thursday, June 17, 2010 10:15 AM > To: rsyslog-users > Subject: [rsyslog] rsyslog - creates wrong directory > > Hi All, > > I have setup centralized system logging using rsyslog-3.22.1-3.el5 and > this > is my /etc/rsyslog.conf {http://pastebin.com/D8eei00p}. In remote host > clients, I use syslog package. When I restart syslog service, the > centralized rsyslog server creates directory with hostname based. > However > there are two wrong directory created (exiting and syslogd) on > /var/log/syslog. > > Can help to check if there is mistake lines on my rsyslog > configuration? > > Thank you. > > Regards, > James > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
