Mhhh... I think I give up. The systems seems to behave extremly strange, it's again jsut the rsyslog debug log. There are so many strange things on that system. Have considered installing a test system from scratch and checking if all works well, there? Rainer
> -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Rahul Bhat > Sent: Monday, January 28, 2013 12:59 PM > To: [email protected] > Subject: Re: [rsyslog] Hi - Rsyslog run in debug mode only > > > > Unfortunately, this did not work, it's just the rsyslog log. I also need > > all BUT > write, that's !write not write ;) Looks like there was an escape missing: > > > > $ strace -ttt -T -e trace=\!write -f rsyslogd -nd > rsyslog_strace.log > Ok here you go with the new logs , Hope this is what you were looking for. > > From: [email protected] > > To: [email protected] > > Date: Mon, 28 Jan 2013 11:26:31 +0000 > > Subject: Re: [rsyslog] Hi - Rsyslog run in debug mode only > > > > > > > > > -----Original Message----- > > > From: [email protected] [mailto:rsyslog- > > > [email protected]] On Behalf Of Rahul Bhat > > > Sent: Monday, January 28, 2013 12:22 PM > > > To: [email protected] > > > Subject: Re: [rsyslog] Hi - Rsyslog run in debug mode only > > > > > > > > > Sorry, I should have mentioned, it's a bit tricky so that the debug > > > system does not get into our way: > > > > > > > > > > $ export RSYSLOG_DEBUG="nologtimestamp" > > > > > $ strace -ttt -T -e trace=!write -f rsyslogd -nd .... > logfile > > > > > : with root > > > permission , I cannot find the command working .Any other alternative ? > > > > > > > > strace -ttt -T -e trace=!write -f rsyslogd -nd > rsyslog_strace.log > > > > Dear > > > Rainer , it finally worked.attched is the log file. > > > strace -ttt -T -e trace=write -f > > > rsyslogd -nd > rsyslog_strace.log > > > > Unfortunately, this did not work, it's just the rsyslog log. I also need > > all BUT > write, that's !write not write ;) Looks like there was an escape missing: > > > > $ strace -ttt -T -e trace=\!write -f rsyslogd -nd > rsyslog_strace.log > > > > Rainer > > > > > > > > > > > > From: [email protected] > > > > To: [email protected] > > > > Date: Mon, 28 Jan 2013 11:21:10 +0100 > > > > Subject: Re: [rsyslog] Hi - Rsyslog run in debug mode only > > > > > > > > > > > > > > > > > > > > > > > > I just did, but I have to admit it looks rather strange. > > > > > > > Could you create a > > > > > > combined debug log & strace so that I can see what is issued > > > > > > in the case it works. I'd like to see the difference. Sorry > > > > > > for my ignorance , but what do you mean " create a combined > > > > > > debug log & > > > strace "How can I do this ? > > > > > > > > > > Sorry, I should have mentioned, it's a bit tricky so that the > > > > > debug system > > > does not get into our way: > > > > > > > > > > $ export RSYSLOG_DEBUG="nologtimestamp" > > > > > $ strace -ttt -T -e trace=!write -f rsyslogd -nd .... > logfile > > > > > : with root > > > permission , I cannot find the command working .Any other alternative ? > > > > > > > > strace -ttt -T -e trace=!write -f rsyslogd -nd > > > > > rsyslog_strace.log > > > > > > > > bash: > > > > !write: event not found > > > > > > > > > > > > > > > > > > Rainer > > > > > _______________________________________________ > > > > > rsyslog mailing list > > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > > http://www.rsyslog.com/professional-services/ > > > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > > > NOTE > > > > > WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > > > > myriad of sites > > > beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T > > > LIKE THAT. > > > > > > > > _______________________________________________ > > > > rsyslog mailing list > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > http://www.rsyslog.com/professional-services/ > > > > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE > > > > WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > > > myriad of sites > > > beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T > > > LIKE THAT. > > > > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE > > WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites > beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
