Using new syntax on v7 (both stable and dev), I still get the same error:
- Config: module(load="imuxsock" parsetrusted="on" SysSock.Annotate="on")
- Error: rsyslogd: error during parsing file /etc/rsyslog.conf, on or
before line 87: parameter 'parsetrusted' not known -- typo in config file?
[try http://www.rsyslog.com/e/2207 ]
(also tried syssock.parsetrusted)
However, I got good results using old syntax :
$ModLoad imuxsock
$SystemLogUsePIDFromSystem on
$SystemLogSocketAnnotate on
$SystemLogParseTrusted on
template(name="test" type="subtree" subtree="$!")
action(type="omfile" file="/tmp/test" template="test")
Result:
# logger foo
# cat /tmp/test
{ "pid": 14323, "uid": 0, "gid": 0, "exe": "\/usr\/bin\/logger", "cmd":
"logger foo " }
Thanks! :-)
Philippe Muller
On Thu, Mar 14, 2013 at 7:03 PM, Rainer Gerhards
<[email protected]>wrote:
>
>
> > -----Original Message-----
> > From: [email protected] [mailto:rsyslog-
> > [email protected]] On Behalf Of Rainer Gerhards
> > Sent: Thursday, March 14, 2013 7:01 PM
> > To: rsyslog-users
> > Subject: Re: [rsyslog] Trusted properties parsing
> >
> >
> >
> > > -----Original Message-----
> > > From: [email protected] [mailto:rsyslog-
> > > [email protected]] On Behalf Of Philippe Muller
> > > Sent: Thursday, March 14, 2013 4:51 PM
> > > To: rsyslog-users
> > > Subject: [rsyslog] Trusted properties parsing
> > >
> > > Hello,
> > >
> > > Reading project Lumberjack documentation[1], I spotted the
> > > "SystemLogParseTrusted" parameter.
> > >
> > > From what I'm guessing, it will parses my messages trusted properties
> > > and make them available as rainerscript variables.
> > > At least, that's what I'm looking for.
> > >
> > > However :
> > > - I can't find any documentation about it.
> > > - Running a config check, rsyslog says that SystemLogParseTrusted is
> > > an "invalid or yet-unknown config file command"
> > >
> > > I looked at imuxsock code, it's like the feature is implemented but I
> > > can't find a way to use it.
> >
> > I just checked. Looks like this is contributed code where no doc was
> > contributed. It seems to be supported via legacy parameters, only, so
> >
> > $SystemLogParseTrusted on
> >
> > should activate it. I'll see that I can fix these two nits when I have
> time to do
> I was wrong. The v7 input param is "parsetrusted". So it is "just" the doc.
>
> Rainer
>
> > so. Unfortunately, the todo list is quite long at the moment.
> >
> > Let me know if that helps.
> >
> > Rainer
> > >
> > > Did anyone know how to make trusted properties available as
> > > rainerscript variables ?
> > >
> > > Thanks !
> > >
> > > Philippe Muller
> > >
> > >
> > > References:
> > > 1: https://fedorahosted.org/lumberjack/wiki/rsyslog
> > > _______________________________________________
> > > rsyslog mailing list
> > > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > > http://www.rsyslog.com/professional-services/
> > > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE
> WELL:
> > > This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites
> > > beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
> > LIKE THAT.
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com/professional-services/
> > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL:
> > This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites
> beyond
> > our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
