Hi all,
I am somewhat stuck with a very basic configuration. I use
rsyslogd: origin software="rsyslogd" swVersion="7.2.5
And the configuration is like
#### MODULES ####
# -- INPUTS --
module(load="imuxsock") # provides support for local system logging
(e.g. via
logger command)
module(load="imklog") # provides kernel logging support (previously
done by
rklogd)
module(load="immark") # provides --MARK-- message capability
# -- OUTPUTS --
#### GLOBAL DIRECTIVES ####
# Use default timestamp format
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
#### TEMPLATES ####
template(name="xyzzy" type="list") {
property(name="timestamp" dateFormat="rfc3339")
constant(value=" ")
property(name="hostname")
constant(value=" ")
property(name="syslogtag")
constant(value=" ")
property(name="msg" spifno1stsp="on" )
property(name="msg" droplastlf="on" )
constant(value="\n")
}
#### RULES ####
# Log all messages in one place.
*.* /var/log/messages;xyzzy
*.* @@myloghost:20514
I would expect
1. everything is logged in /var/log/messages with template "xyzzy"
2. everything is forwarded to myloghost via TCP/20514
While 1. works as expected 2. does not, I cannot even see a connection
attempt to "myloghost" via tcpdump at all.
At first I suspected I would have to
$ModLoad omfwd
or
follow the omfwd example:
Module(path="builtin:omfwd")
...
*.* action(type="omfwd" Target="xxx.xxx.xxx.xxx" Port="20514"
Protocol="tcp")
but no conecction attempt can be seen.
So, what am I doing wrong?
Best regards
Dirk
PS: the module directive with path="bultin:omfwd" complains with
rsyslogd-2207: error during parsing file /etc/rsyslog.conf, on
or before line 7: parameter 'path' not known -- typo in config
file?
--
Dirk Jahnke-Zumbusch Deutsches Elektronen-Synchrotron DESY
IT Information Fabrics Member of the Helmholtz Association
D-22603 Hamburg Notkestrasse 85 / 22607 Hamburg
--
Dirk Jahnke-Zumbusch Deutsches Elektronen-Synchrotron DESY
IT Information Fabrics Member of the Helmholtz Association
D-22603 Hamburg Notkestrasse 85 / 22607 Hamburg
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
