> -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Corey Smith > Sent: Monday, March 21, 2011 2:54 PM > To: rsyslog-users > Subject: Re: [rsyslog] imsolaris unexpected behavior > > On Fri, Mar 18, 2011 at 2:09 PM, Corey Smith <[email protected]> wrote: > > We are using rsyslog-4.7.3 on solaris 10 i86pc and getting unexpected > > behavior when we try to run rsyslog as the only system logger. All of > > the normal system syslogs processed by imsolaris seem to be facility > > user.notice. > > Attached (inline) is a patch against 4.7.3 that properly extracts the > facility/priority.
Thanks for the patch. I will be to a conference starting Wednesday evening, so this week is a bit "tight". I'll check the solaris build once again next week. > > I noticed that the master branch version of this file has a completely different > parser system. Is there a better version of rsyslog for Solaris that we should > be targeting ? The parser has become more modular. The system in v5+ is the one to stay. However, it should be fairly easy to merge any changes up. But I think I'll need to understand in detail first what the issue really is/was. It may be a good idea to open a bug tracker in bugzilla for this (mailing list and forum threads have some risk of getting forgotten in busy times...). Thanks, Rainer > > -Corey Smith > > --- runtime/parser.c.orig Fri Mar 18 22:57:58 2011 > +++ runtime/parser.c Fri Mar 18 22:58:54 2011 > @@ -305,10 +305,10 @@ > if(pri & ~(LOG_FACMASK|LOG_PRIMASK)) > pri = DEFUPRI; > } > + pMsg->iFacility = LOG_FAC(pri); > + pMsg->iSeverity = LOG_PRI(pri); > + MsgSetAfterPRIOffs(pMsg, msg - pMsg->pszRawMsg); > } > - pMsg->iFacility = LOG_FAC(pri); > - pMsg->iSeverity = LOG_PRI(pri); > - MsgSetAfterPRIOffs(pMsg, msg - pMsg->pszRawMsg); > > /* rger 2005-11-24 (happy thanksgiving!): we now need to check if > we have > * a traditional syslog message or one formatted according to syslog- > protocol. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
