On Wed, 2013-02-20 at 10:26 +0100, Dirk Jahnke-Zumbusch (DESY) wrote:
> Hi all,
>
> I am somewhat stuck with a very basic configuration. I use
>
> rsyslogd: origin software="rsyslogd" swVersion="7.2.5
>
> And the configuration is like
>
> #### MODULES ####
> # -- INPUTS --
> module(load="imuxsock") # provides support for local system logging
> (e.g. via
> logger command)
> module(load="imklog") # provides kernel logging support (previously
> done by
> rklogd)
> module(load="immark") # provides --MARK-- message capability
> # -- OUTPUTS --
>
> #### GLOBAL DIRECTIVES ####
>
> # Use default timestamp format
> $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
>
> #### TEMPLATES ####
>
> template(name="xyzzy" type="list") {
> property(name="timestamp" dateFormat="rfc3339")
> constant(value=" ")
> property(name="hostname")
> constant(value=" ")
> property(name="syslogtag")
> constant(value=" ")
> property(name="msg" spifno1stsp="on" )
> property(name="msg" droplastlf="on" )
> constant(value="\n")
> }
>
> #### RULES ####
> # Log all messages in one place.
> *.* /var/log/messages;xyzzy
> *.* @@myloghost:20514
>
Is that the sole conf? It should work. Maybe a firewall issue?
Can you run rsyslog in debug mode:
http://www.rsyslog.com/doc/troubleshoot.html
This shall give more information on the connection request.
>
> I would expect
>
> 1. everything is logged in /var/log/messages with template "xyzzy"
> 2. everything is forwarded to myloghost via TCP/20514
yup
>
> While 1. works as expected 2. does not, I cannot even see a connection
> attempt to "myloghost" via tcpdump at all.
>
> At first I suspected I would have to
>
> $ModLoad omfwd
>
> or
>
> follow the omfwd example:
> Module(path="builtin:omfwd")
That's only necessary if you want to change default parameters. The
module is loaded automatically (actually linked in).
> ...
> *.* action(type="omfwd" Target="xxx.xxx.xxx.xxx" Port="20514"
> Protocol="tcp")
>
> but no conecction attempt can be seen.
>
> So, what am I doing wrong?
>
> Best regards
> Dirk
>
> PS: the module directive with path="bultin:omfwd" complains with
> rsyslogd-2207: error during parsing file /etc/rsyslog.conf, on
> or before line 7: parameter 'path' not known -- typo in config
> file?
I think the parameter is "load" not "path".
Rainer
>
>
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
