On Wed, 7 Jul 2010, Paul Krash wrote: > Hello! > > I have recently tried to parse syslog messages by %hostname% using the > $RuleSet > module. I have seen this work in Centos with no probs. > > Now I have split out the rule set conf to /etc/rsyslog.d/50-default.conf > (from the all in one conf file found on Centos). > > I am getting the error that a module is missing? > > Is this an Ubuntu special, where a module is not compiled in the distro?
I think it's most likely a problem where ubuntu just ships too old a version. It shipps 4.2.0 and I think rulesets were introduced later than that. > I tried to compile from src, and got the same error. did you uninstall the ubuntu default first? if not then you may be conflicting with it's modules (in /usr/lib/rsyslog where your modules probably went into usr/local/lib/rsyslog) David Lang > How can I get and enable the Module for rulesets? > > Thanks in advance, > > PKrash > > > DISTRIB_ID=Ubuntu > DISTRIB_RELEASE=10.04 > DISTRIB_CODENAME=lucid > DISTRIB_DESCRIPTION="Ubuntu 10.04 LTS" > > error in /var/log/messages: > > Jul 7 15:00:59 watcher rsyslogd-3003: invalid or yet-unknown config file > command - have you forgotten to load a module? [try > http://www.rsyslog.com/e/3003 ] > Jul 7 15:00:59 watcher rsyslogd: the last error occured in /etc/rsyslog.conf, > line 94 > Jul 7 15:00:59 watcher rsyslogd-3003: invalid or yet-unknown config file > command - have you forgotten to load a module? [try > http://www.rsyslog.com/e/3003 ] > Jul 7 15:00:59 watcher rsyslogd: the last error occured in /etc/rsyslog.conf, > line 109 > Jul 7 15:00:59 watcher rsyslogd-3003: invalid or yet-unknown config file > command - have you forgotten to load a module? [try > http://www.rsyslog.com/e/3003 ] > Jul 7 15:00:59 watcher rsyslogd: the last error occured in /etc/rsyslog.conf, > line 110 > Jul 7 15:00:59 watcher rsyslogd-3003: invalid or yet-unknown config file > command - have you forgotten to load a module? [try > http://www.rsyslog.com/e/3003 ] > Jul 7 15:00:59 watcher rsyslogd: the last error occured in /etc/rsyslog.conf, > line 112 > Jul 7 15:00:59 watcher rsyslogd-2123: CONFIG ERROR: could not interpret > master > config file '/etc/rsyslog.conf'. [try http://www.rsyslog.com/e/2123 ] > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
