I don't think so, I think you will need to use the old style config for all
parameters related to that input.
David Lang
On Thu, 3 Oct 2013, Matt Davis wrote:
Ah excellent thanks David. I think I'll try the old-style "legacy" config
first.
Can I mix new-style and legacy? Could I do this?
input( type="imfile"
File="_error.log"
Tag="_error: "
StateFile="_error"
Severity="error" )
$InputFileFacility local4
On Wed, Oct 2, 2013 at 8:35 PM, David Lang <[email protected]> wrote:
ahh, I forgot about that bug.
no, the commit that fixes this is 98745101a103d1aef7a6c79cec8708**729a2895fa
and went into the tree Sep 18, and there hasn't been a release since then.
the patch that went in is http://git.adiscon.com/?p=**
rsyslog.git;a=commitdiff;h=**98745101a103d1aef7a6c79cec8708**729a2895fa<http://git.adiscon.com/?p=rsyslog.git;a=commitdiff;h=98745101a103d1aef7a6c79cec8708729a2895fa>
you should be able to use the old-style config
David Lang
On Wed, 2 Oct 2013, Matt Davis wrote:
Date: Wed, 2 Oct 2013 20:11:31 -0700
From: Matt Davis <[email protected]>
Reply-To: rsyslog-users <[email protected]>
To: rsyslog-users <[email protected]>
Subject: Re: [rsyslog] imfile facility bug
Yup, that's correct. I am using version 7.4.3 right now, and didn't see
this addressed in the changelog for 7.4.4, but maybe I missed it.
Setting Facility to anything above local0 will not work: it defaults to
local0 regardless. I saw a forum post about this (not on my laptop with the
link atm), followed by a comment that it was a typo to be fixed in a future
update.
I'm just wondering if that's been accomplished yet, and if not can I make
the typo fix myself. :)
-m
On Oct 2, 2013, at 7:05 PM, David Lang <[email protected]> wrote:
does it not work when you set the facility?
what version are you using?
David Lang
On Wed, 2 Oct 2013, Matt Davis wrote:
Hey all,
I really want to use imfile and set the Facility to something other than
local0, has the bug fix for this been added to any currently released
beta
version? If not, is there a patch available?
Or, does anyone have suggestions on how to get around it? I'm using
logstash as a central syslog in this case, and want the imfile files to
come through as local4, configured as an entirely separate filter in a
config within /etc/rsyslog.d/ (i.e. the main rsyslog.conf would have a
'local4.none' configured for its "global" forward rule).
Thanks!
-matt
______________________________**_________________
rsyslog mailing list
http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog>
http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/>
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if
you DON'T LIKE THAT.
______________________________**_________________
rsyslog mailing list
http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog>
http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/>
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.
______________________________**_________________
rsyslog mailing list
http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog>
http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/>
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.
______________________________**_________________
rsyslog mailing list
http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog>
http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/>
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
