I've been doing some testing and debugging on my rules in rsyslog (5.9.5, built from sources on CentOS 5.6), and I've discovered that the property "pri-text" doesn't just give you the textual form.
using: ----- $template testfmt, "%pri-text%\n" *.* /var/log/testing;testfmt ----- I end up with, for example: ----- local0.notice<133> ----- in my logfile. On the bright side, I now know why my rules aren't working, like: ----- :pri-text, !isequal, "local0.err" ~ *.* /var/log/local0.err.log ----- Since there is always the contents of "%pri%" tacked on the end, nothing will ever be equal to "local0.err" and my log file stays empty. I can work around this for now by using startswith instead of isequal, but the behavior still bugs me. Is this a bug, or intended behavior? Thanks, Gregory -- Gregory K. Ruiz-Ade <[email protected]> OpenPGP Key ID: EAF4844B keyserver: pgpkeys.mit.edu _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
