Ah excellent thanks David. I think I'll try the old-style "legacy" config
first.
Can I mix new-style and legacy? Could I do this?
input( type="imfile"
File="_error.log"
Tag="_error: "
StateFile="_error"
Severity="error" )
$InputFileFacility local4
On Wed, Oct 2, 2013 at 8:35 PM, David Lang <[email protected]> wrote:
> ahh, I forgot about that bug.
>
> no, the commit that fixes this is 98745101a103d1aef7a6c79cec8708**729a2895fa
> and went into the tree Sep 18, and there hasn't been a release since then.
>
> the patch that went in is http://git.adiscon.com/?p=**
> rsyslog.git;a=commitdiff;h=**98745101a103d1aef7a6c79cec8708**729a2895fa<http://git.adiscon.com/?p=rsyslog.git;a=commitdiff;h=98745101a103d1aef7a6c79cec8708729a2895fa>
>
> you should be able to use the old-style config
>
>
> David Lang
>
> On Wed, 2 Oct 2013, Matt Davis wrote:
>
> Date: Wed, 2 Oct 2013 20:11:31 -0700
>> From: Matt Davis <[email protected]>
>> Reply-To: rsyslog-users <[email protected]>
>> To: rsyslog-users <[email protected]>
>> Subject: Re: [rsyslog] imfile facility bug
>>
>>
>> Yup, that's correct. I am using version 7.4.3 right now, and didn't see
>> this addressed in the changelog for 7.4.4, but maybe I missed it.
>>
>> Setting Facility to anything above local0 will not work: it defaults to
>> local0 regardless. I saw a forum post about this (not on my laptop with the
>> link atm), followed by a comment that it was a typo to be fixed in a future
>> update.
>>
>> I'm just wondering if that's been accomplished yet, and if not can I make
>> the typo fix myself. :)
>>
>> -m
>>
>> On Oct 2, 2013, at 7:05 PM, David Lang <[email protected]> wrote:
>>>
>>> does it not work when you set the facility?
>>>
>>> what version are you using?
>>>
>>> David Lang
>>>
>>> On Wed, 2 Oct 2013, Matt Davis wrote:
>>>>
>>>> Hey all,
>>>>
>>>> I really want to use imfile and set the Facility to something other than
>>>> local0, has the bug fix for this been added to any currently released
>>>> beta
>>>> version? If not, is there a patch available?
>>>>
>>>> Or, does anyone have suggestions on how to get around it? I'm using
>>>> logstash as a central syslog in this case, and want the imfile files to
>>>> come through as local4, configured as an entirely separate filter in a
>>>> config within /etc/rsyslog.d/ (i.e. the main rsyslog.conf would have a
>>>> 'local4.none' configured for its "global" forward rule).
>>>>
>>>> Thanks!
>>>> -matt
>>>> ______________________________**_________________
>>>> rsyslog mailing list
>>>> http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog>
>>>> http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/>
>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
>>>> myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if
>>>> you DON'T LIKE THAT.
>>>>
>>> ______________________________**_________________
>>> rsyslog mailing list
>>> http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog>
>>> http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/>
>>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
>>> DON'T LIKE THAT.
>>>
>> ______________________________**_________________
>> rsyslog mailing list
>> http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog>
>> http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/>
>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
>> DON'T LIKE THAT.
>>
>> ______________________________**_________________
> rsyslog mailing list
> http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog>
> http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/>
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
