write the messages out using RSYSLOG_Debug_format and look at the contents of
the fields. My guess is that it's bad capitalization or something like that.
The other thing is to check the error messages from when rsyslog starts, looking
for any syntax errors that it reports.
David Lang
On Wed, 28 Aug 2013, jinge wrote:
Date: Wed, 28 Aug 2013 10:11:45 +0800
From: jinge <[email protected]>
Reply-To: rsyslog-users <[email protected]>
To: [email protected]
Subject: [rsyslog] Rsyslog with omprog and condition filter not success
Hi, all!
We use rsyslog for our messages process.And use the omprog custom some process
but we never sucess when use the condition filter with omprog
we use ubuntu 13.04 and rsyslog 5.8.11 and the omprog success if process all
message *.* and the below is never sucess.
$ModLoad omprog
$ActionOMProgBinary /root/omprog.py
if $syslogfacility-text == 'local4' and ($msg contains 'HTTP: Invalid Response:
No object data received for') then :omprog:;RSYSLOG_TraditionalFileFormat
here is my omprog.py
https://gist.github.com/altman87120/6338616#file-omprog-py
Is there anyone can help? Thanks!
Regards
Jinge
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
