Hello! I have recently tried to parse syslog messages by %hostname% using the $RuleSet module. I have seen this work in Centos with no probs.
Now I have split out the rule set conf to /etc/rsyslog.d/50-default.conf (from the all in one conf file found on Centos). I am getting the error that a module is missing? Is this an Ubuntu special, where a module is not compiled in the distro? I tried to compile from src, and got the same error. How can I get and enable the Module for rulesets? Thanks in advance, PKrash DISTRIB_ID=Ubuntu DISTRIB_RELEASE=10.04 DISTRIB_CODENAME=lucid DISTRIB_DESCRIPTION="Ubuntu 10.04 LTS" error in /var/log/messages: Jul 7 15:00:59 watcher rsyslogd-3003: invalid or yet-unknown config file command - have you forgotten to load a module? [try http://www.rsyslog.com/e/3003 ] Jul 7 15:00:59 watcher rsyslogd: the last error occured in /etc/rsyslog.conf, line 94 Jul 7 15:00:59 watcher rsyslogd-3003: invalid or yet-unknown config file command - have you forgotten to load a module? [try http://www.rsyslog.com/e/3003 ] Jul 7 15:00:59 watcher rsyslogd: the last error occured in /etc/rsyslog.conf, line 109 Jul 7 15:00:59 watcher rsyslogd-3003: invalid or yet-unknown config file command - have you forgotten to load a module? [try http://www.rsyslog.com/e/3003 ] Jul 7 15:00:59 watcher rsyslogd: the last error occured in /etc/rsyslog.conf, line 110 Jul 7 15:00:59 watcher rsyslogd-3003: invalid or yet-unknown config file command - have you forgotten to load a module? [try http://www.rsyslog.com/e/3003 ] Jul 7 15:00:59 watcher rsyslogd: the last error occured in /etc/rsyslog.conf, line 112 Jul 7 15:00:59 watcher rsyslogd-2123: CONFIG ERROR: could not interpret master config file '/etc/rsyslog.conf'. [try http://www.rsyslog.com/e/2123 ] _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com

