The legacy config worked ok before the patch and the v7 config works after applying your patch. Thanks!
Another thing I noticed trying to get this to work was using keepalive with the imptcp module statement throws "parameter 'keepalive' not known -- typo in config file" during config validation. Perhaps this is a related problem? On Sun, Nov 25, 2012 at 10:12 AM, Rainer Gerhards <[email protected]>wrote: > > > -----Original Message----- > > From: [email protected] [mailto:rsyslog- > > [email protected]] On Behalf Of Mark Reidenbach > > Sent: Sunday, November 25, 2012 4:46 PM > > To: rsyslog-users > > Subject: [rsyslog] How to disable supportOctetCountedFraming for imptcp > > using v7 config > > > > I am having trouble getting the new v7 config format to function like > > our > > legacy config. Specifically, the supportoctetcountedframing="off" on > > the > > input statement does not seem to disable the octet framing, but I can't > > figure where else it might go. I've tried it on the module statement > > (not > > known -- typo in config file) as well as > > "$InputPTCPServerSupportOctetCountedFraming off" (no effect - still get > This affects only legacy statements, not the input() statement. > > > octet framing error) after the module statement as well as in the > > ruleset. > > The problem was a pretty dumb bug. Thanks for alerting me. The bugfix (for > v7-stable) can be found here: > > > http://git.adiscon.com/?p=rsyslog.git;a=commitdiff;h=36606b01b5dbc9642517e39631b5f3a654d6fe7b > > > > > The legacy config is: > > > > $ModLoad imptcp > > $MaxMessageSize 4k > > > > $template AvayaSMDR, "%timegenerated% %fromhost% > > avaya:,%rawmsg:::drop-last-lf%\n" > > > > $RuleSet avaya > > $umask 0000 > > $FileCreateMode 0777 > > $FileOwner backup > > $FileGroup web > > > > $InputPTCPServerSupportOctetCountedFraming off > > $InputPTCPServerBindRuleset avaya > > $InputPTCPServerRun 10514 > Mhhh.. this sequence should work. Can you post a debug log of the startup > and when a message arrives? Or is this what actually works? > > > *.* /home/vhost/phone-logs/logs/call.log;AvayaSMDR > > > > And my attempt at a v7 format is: > > module(load="imptcp") > > template(name="AvayaSMDR" type="list") { > > property(name="timestamp") > > constant(value=" ") > > property(name="hostname") > > constant(value=" ") > > property(name="syslogtag") > > constant(value=", ") > > property(name="msg" spifno1stsp="on") > > property(name="msg" droplastlf="on") > > constant(value="\n") > > } > > ruleset(name="avaya") { > > $umask 0000 > > $FileCreateMode 0777 > > $FileOwner backup > > $FileGroup web > Be careful: those 4 directives above are *global*, they do NOT just affect > this ruleset. > > > > *.* /home/vhost/phone-logs/logs/call.log;AvayaSMDR > > } > > input(type="imptcp" port="10514" supportoctetcountedframing="off" > > ruleset="avaya") > This didn't work due to the bug but will work with the patch applied. > > Rainer > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST > > if you DON'T LIKE THAT. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
