There was no particular reason to use app-name rather than programname, but I still get the error when using programname:
Apr 26 12:36:57 opbhddata001 rsyslogd: the last error occured in /etc/rsyslog.d/10-datanode.conf, line 1:":programname,isequal,"DataNode" :omrelp:opbhdname001:20514;RSYSLOG_ForwardFormat" -Steven Willis ________________________________________ From: [email protected] [[email protected]] On Behalf Of [email protected] [[email protected]] Sent: Thursday, April 26, 2012 12:09 PM To: rsyslog-users Subject: Re: [rsyslog] error on app-name contains The other thing is that it may be that app-name doesn't exist in such an old version. Why are you using app-name instead of programname? David Lang On Thu, 26 Apr 2012, Steven Willis wrote: > Date: Thu, 26 Apr 2012 10:43:23 -0400 > From: Steven Willis <[email protected]> > Reply-To: rsyslog-users <[email protected]> > To: rsyslog-users <[email protected]> > Subject: Re: [rsyslog] error on app-name contains > > Well, I tried changing it to single quotes and that completely broke rsyslog. > It would crash on startup, no error messages or anything. I also tried no > quotes, but that failed just like single quotes. I also tried adding spaces > after the commas, but that made no difference. I noticed that in the default > redhat config all the modules had .so after them, whereas my ubuntu config > didn't. It seemed like I could do it either way on the $ModLoad line, but > perhaps I need to do :omrelp.so: when using it? > > -Steve > ________________________________________ > From: [email protected] [[email protected]] > On Behalf Of [email protected] [[email protected]] > Sent: Wednesday, April 25, 2012 8:29 PM > To: rsyslog-users > Subject: Re: [rsyslog] error on app-name contains > > the first thing that I always look at is should you use " or ' rsyslog 4.x > only accepts one, and I _think_ I remember it's ' > > David Lang > > On Wed, 25 Apr 2012, Steven Willis wrote: > >> Hi, >> >> I'm getting an error with rsyslog 4.6.2 on redhat 6 with the line: >> >> :app-name,contains,"DataNode" >> :omrelp:opbhdname001:20514;RSYSLOG_ForwardFormat >> >> The error line in /var/log/messages is: >> >> Apr 25 19:51:55 opbhddata001 rsyslogd: the last error occured in >> /etc/rsyslog.d/10-datanode.conf, line 1:":app-name,contains,"DataNode" >> :omrelp:opbhdname001:20514;RSYSLOG_ForwardFormat" >> >> I don't get that error with 5.8.1 on ubuntu. I looked through the >> documentation under /usr/share/doc/rsyslog-4.6.2 and it looks like I'm doing >> it right, can you help me out? >> >> -Steven Willis >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards
