-----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Mark Reidenbach > Sent: Sunday, November 25, 2012 6:47 PM > To: rsyslog-users > Subject: Re: [rsyslog] How to disable supportOctetCountedFraming for > imptcp using v7 config > > The legacy config worked ok before the patch and the v7 config works > after > applying your patch. Thanks! > > Another thing I noticed trying to get this to work was using keepalive > with > the imptcp module statement throws "parameter 'keepalive' not known -- > typo > in config file" during config validation. Perhaps this is a related > problem?
No, there simply is no such module parameter. Keepalive needs to be set on a per-input basis. I have made the doc a bit more explicit in this regard: http://www.rsyslog.com/doc/imptcp.html Rainer > > > On Sun, Nov 25, 2012 at 10:12 AM, Rainer Gerhards > <[email protected]>wrote: > > > > > > -----Original Message----- > > > From: [email protected] [mailto:rsyslog- > > > [email protected]] On Behalf Of Mark Reidenbach > > > Sent: Sunday, November 25, 2012 4:46 PM > > > To: rsyslog-users > > > Subject: [rsyslog] How to disable supportOctetCountedFraming for > imptcp > > > using v7 config > > > > > > I am having trouble getting the new v7 config format to function > like > > > our > > > legacy config. Specifically, the supportoctetcountedframing="off" > on > > > the > > > input statement does not seem to disable the octet framing, but I > can't > > > figure where else it might go. I've tried it on the module > statement > > > (not > > > known -- typo in config file) as well as > > > "$InputPTCPServerSupportOctetCountedFraming off" (no effect - still > get > > This affects only legacy statements, not the input() statement. > > > > > octet framing error) after the module statement as well as in the > > > ruleset. > > > > The problem was a pretty dumb bug. Thanks for alerting me. The bugfix > (for > > v7-stable) can be found here: > > > > > > > http://git.adiscon.com/?p=rsyslog.git;a=commitdiff;h=36606b01b5dbc96425 > 17e39631b5f3a654d6fe7b > > > > > > > > The legacy config is: > > > > > > $ModLoad imptcp > > > $MaxMessageSize 4k > > > > > > $template AvayaSMDR, "%timegenerated% %fromhost% > > > avaya:,%rawmsg:::drop-last-lf%\n" > > > > > > $RuleSet avaya > > > $umask 0000 > > > $FileCreateMode 0777 > > > $FileOwner backup > > > $FileGroup web > > > > > > $InputPTCPServerSupportOctetCountedFraming off > > > $InputPTCPServerBindRuleset avaya > > > $InputPTCPServerRun 10514 > > Mhhh.. this sequence should work. Can you post a debug log of the > startup > > and when a message arrives? Or is this what actually works? > > > > > *.* /home/vhost/phone-logs/logs/call.log;AvayaSMDR > > > > > > And my attempt at a v7 format is: > > > module(load="imptcp") > > > template(name="AvayaSMDR" type="list") { > > > property(name="timestamp") > > > constant(value=" ") > > > property(name="hostname") > > > constant(value=" ") > > > property(name="syslogtag") > > > constant(value=", ") > > > property(name="msg" spifno1stsp="on") > > > property(name="msg" droplastlf="on") > > > constant(value="\n") > > > } > > > ruleset(name="avaya") { > > > $umask 0000 > > > $FileCreateMode 0777 > > > $FileOwner backup > > > $FileGroup web > > Be careful: those 4 directives above are *global*, they do NOT just > affect > > this ruleset. > > > > > > *.* /home/vhost/phone-logs/logs/call.log;AvayaSMDR > > > } > > > input(type="imptcp" port="10514" supportoctetcountedframing="off" > > > ruleset="avaya") > > This didn't work due to the bug but will work with the patch applied. > > > > Rainer > > > _______________________________________________ > > > rsyslog mailing list > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT > POST > > > if you DON'T LIKE THAT. > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > you > > DON'T LIKE THAT. > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST > if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
