On Fri, Mar 18, 2011 at 2:09 PM, Corey Smith <[email protected]> wrote:
> We are using rsyslog-4.7.3 on solaris 10 i86pc and getting unexpected
> behavior when we try to run rsyslog as the only system logger. All of
> the normal system syslogs processed by imsolaris seem to be facility
> user.notice.
Attached (inline) is a patch against 4.7.3 that properly extracts the
facility/priority.
I noticed that the master branch version of this file has a completely
different parser system. Is there a better version of rsyslog for
Solaris that we should be targeting ?
-Corey Smith
--- runtime/parser.c.orig Fri Mar 18 22:57:58 2011
+++ runtime/parser.c Fri Mar 18 22:58:54 2011
@@ -305,10 +305,10 @@
if(pri & ~(LOG_FACMASK|LOG_PRIMASK))
pri = DEFUPRI;
}
+ pMsg->iFacility = LOG_FAC(pri);
+ pMsg->iSeverity = LOG_PRI(pri);
+ MsgSetAfterPRIOffs(pMsg, msg - pMsg->pszRawMsg);
}
- pMsg->iFacility = LOG_FAC(pri);
- pMsg->iSeverity = LOG_PRI(pri);
- MsgSetAfterPRIOffs(pMsg, msg - pMsg->pszRawMsg);
/* rger 2005-11-24 (happy thanksgiving!): we now need to check if we
have
* a traditional syslog message or one formatted according to
syslog-protocol.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
