It appears not. However, legacy ruleset worked fine and I have local4 going to a separate port on my logstash shipper now. Thanks again! -matt
On Thu, Oct 3, 2013 at 2:13 PM, Matt Davis <[email protected]> wrote: > Ah excellent thanks David. I think I'll try the old-style "legacy" config > first. > > Can I mix new-style and legacy? Could I do this? > > input( type="imfile" > File="_error.log" > Tag="_error: " > StateFile="_error" > Severity="error" ) > > $InputFileFacility local4 > > > On Wed, Oct 2, 2013 at 8:35 PM, David Lang <[email protected]> wrote: > >> ahh, I forgot about that bug. >> >> no, the commit that fixes this is 98745101a103d1aef7a6c79cec8708**729a2895fa >> and went into the tree Sep 18, and there hasn't been a release since then. >> >> the patch that went in is http://git.adiscon.com/?p=** >> rsyslog.git;a=commitdiff;h=**98745101a103d1aef7a6c79cec8708**729a2895fa<http://git.adiscon.com/?p=rsyslog.git;a=commitdiff;h=98745101a103d1aef7a6c79cec8708729a2895fa> >> >> you should be able to use the old-style config >> >> >> David Lang >> >> On Wed, 2 Oct 2013, Matt Davis wrote: >> >> Date: Wed, 2 Oct 2013 20:11:31 -0700 >>> From: Matt Davis <[email protected]> >>> Reply-To: rsyslog-users <[email protected]> >>> To: rsyslog-users <[email protected]> >>> Subject: Re: [rsyslog] imfile facility bug >>> >>> >>> Yup, that's correct. I am using version 7.4.3 right now, and didn't see >>> this addressed in the changelog for 7.4.4, but maybe I missed it. >>> >>> Setting Facility to anything above local0 will not work: it defaults to >>> local0 regardless. I saw a forum post about this (not on my laptop with the >>> link atm), followed by a comment that it was a typo to be fixed in a future >>> update. >>> >>> I'm just wondering if that's been accomplished yet, and if not can I >>> make the typo fix myself. :) >>> >>> -m >>> >>> On Oct 2, 2013, at 7:05 PM, David Lang <[email protected]> wrote: >>>> >>>> does it not work when you set the facility? >>>> >>>> what version are you using? >>>> >>>> David Lang >>>> >>>> On Wed, 2 Oct 2013, Matt Davis wrote: >>>>> >>>>> Hey all, >>>>> >>>>> I really want to use imfile and set the Facility to something other >>>>> than >>>>> local0, has the bug fix for this been added to any currently released >>>>> beta >>>>> version? If not, is there a patch available? >>>>> >>>>> Or, does anyone have suggestions on how to get around it? I'm using >>>>> logstash as a central syslog in this case, and want the imfile files to >>>>> come through as local4, configured as an entirely separate filter in a >>>>> config within /etc/rsyslog.d/ (i.e. the main rsyslog.conf would have a >>>>> 'local4.none' configured for its "global" forward rule). >>>>> >>>>> Thanks! >>>>> -matt >>>>> ______________________________**_________________ >>>>> rsyslog mailing list >>>>> http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog> >>>>> http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/> >>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >>>>> myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if >>>>> you DON'T LIKE THAT. >>>>> >>>> ______________________________**_________________ >>>> rsyslog mailing list >>>> http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog> >>>> http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/> >>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >>>> myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if >>>> you DON'T LIKE THAT. >>>> >>> ______________________________**_________________ >>> rsyslog mailing list >>> http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog> >>> http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/> >>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >>> DON'T LIKE THAT. >>> >>> ______________________________**_________________ >> rsyslog mailing list >> http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog> >> http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/> >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. >> > > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
