Hi,
Am 12-06-2013 17:20, schrieb Rainer Gerhards:
On Mon, Jun 10, 2013 at 11:18 PM, Aleksandar Lazic
<[email protected]>wrote:
[snipp]
So the programname == 'unbound' the logfile is created.
sorry - so do you say it works (the rest of the message somehow does
not
look so ;))?
Nope. it does not work. I just mean that the programname is unbound.
I have no moved more and more to RainerScript, but still I don't get
what I wanted.
Due to the fact that I'am try to come to a solution you can find my
current configs in this archive
http://download.none.at/rsyslog_confs.tar.gz
What I'am not understand is that in
/etc/rsyslog.d/50-default.conf
...
mail.* -/var/log/mail.log
...
works but in /etc/rsyslog.d/21-postfix.conf
###
input(type="imuxsock" Socket="/var/spool/postfix/dev/log")
if $programname == 'postfix' then {
action(type="omfile" name="postfix"
DirCreateMode="0755"
FileCreateMode="0644"
Sync="on"
FileOwner="syslog"
FileGroup="adm"
File=" /var/log/postfix.log")
stop
}
###
does not work.
Rainer
Aleks
root ~ # ls -larth /var/log/{debugfmt,unbound.log}
-rw-r--r-- 1 syslog adm 9,2K Mai 22 16:47 /var/log/unbound.log
-rw-r--r-- 1 syslog adm 43K Jun 10 23:10 /var/log/debugfmt
the new -dn output can be found here
http://download.none.at/**rsyslogd-debug_02.log<http://download.none.at/rsyslogd-debug_02.log>
this is the part of /etc/rsyslog.d/21-unbound.conf
###
8994.435982456:7fcc66ae5740: IF
8994.435983837:7fcc66ae5740: var '$programname'
8994.435987329:7fcc66ae5740: ==
8994.435989708:7fcc66ae5740: string 'unbound'
8994.435994350:7fcc66ae5740: THEN
8994.435995783:7fcc66ae5740: ACTION 0xe95d90 [/var/log/unbound.log]
8994.436000687:7fcc66ae5740: END IF
###
Rainer
Aleks
Thx,
Rainer
BR
Aleks
after a host www.none.at I have only the message in /var/log/syslog
but
not in /var/log/unbound.log
My setup:
###
lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 12.04.2 LTS
Release: 12.04
Codename: precise
###
rsyslogd -v
rsyslogd 7.4.0, compiled with:
FEATURE_REGEXP: Yes
FEATURE_LARGEFILE: No
GSSAPI Kerberos 5 support: Yes
FEATURE_DEBUG (debug build, slow code): No
32bit Atomic operations supported: Yes
64bit Atomic operations supported: Yes
Runtime Instrumentation (slow code): No
uuid support: Yes
See http://www.rsyslog.com for more information.
####
/usr/sbin/rsyslogd -dn > rsyslogd-debug_01.log
http://download.none.at/****rsyslogd-debug_01.log<http://download.none.at/**rsyslogd-debug_01.log>
<http://**download.none.at/rsyslogd-**debug_01.log<http://download.none.at/rsyslogd-debug_01.log>
>
<http://**download.none.at/**rsyslogd-**debug_01.log<http://download.none.at/rsyslogd-**debug_01.log>
<http:/**/download.none.at/rsyslogd-**debug_01.log<http://download.none.at/rsyslogd-debug_01.log>
>
>
###
Thanks for any help.
BR Aleks
______________________________******_________________
rsyslog mailing list
http://lists.adiscon.net/******mailman/listinfo/rsyslog<http://lists.adiscon.net/****mailman/listinfo/rsyslog>
<http:**//lists.adiscon.net/**mailman/**listinfo/rsyslog<http://lists.adiscon.net/**mailman/listinfo/rsyslog>
>
<http:**//lists.adiscon.net/**mailman/**listinfo/rsyslog<http://lists.adiscon.net/mailman/**listinfo/rsyslog>
<htt**p://lists.adiscon.net/mailman/**listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog>
>
>
http://www.rsyslog.com/******professional-services/<http://www.rsyslog.com/****professional-services/>
<http://**www.rsyslog.com/****professional-services/<http://www.rsyslog.com/**professional-services/>
>
<http://**www.rsyslog.com/**professional-**services/<http://www.rsyslog.com/professional-**services/>
<http:**//www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/>
>
>
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if
you
DON'T LIKE THAT.
______________________________****_________________
rsyslog mailing list
http://lists.adiscon.net/****mailman/listinfo/rsyslog<http://lists.adiscon.net/**mailman/listinfo/rsyslog>
<http:**//lists.adiscon.net/mailman/**listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog>
>
http://www.rsyslog.com/****professional-services/<http://www.rsyslog.com/**professional-services/>
<http://**www.rsyslog.com/professional-**services/<http://www.rsyslog.com/professional-services/>
>
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT
POST
if you DON'T LIKE THAT.
______________________________****_________________
rsyslog mailing list
http://lists.adiscon.net/****mailman/listinfo/rsyslog<http://lists.adiscon.net/**mailman/listinfo/rsyslog>
<http:**//lists.adiscon.net/mailman/**listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog>
>
http://www.rsyslog.com/****professional-services/<http://www.rsyslog.com/**professional-services/>
<http://**www.rsyslog.com/professional-**services/<http://www.rsyslog.com/professional-services/>
>
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if
you
DON'T LIKE THAT.
______________________________**_________________
rsyslog mailing list
http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog>
http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/>
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT
POST
if you DON'T LIKE THAT.
______________________________**_________________
rsyslog mailing list
http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog>
http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/>
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST
if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
