On Tue, 18 Feb 2014, Darhl Thomason wrote:
It definitely threw errors when I did that. I changed my config file to: if ($source contains 'switch_') then { :ommysql:127.0.0.1,Syslog,rsyslog,myPassword;switches stop } and when I restarted rsyslog I received a series of errors and the info only went to the catchall. the last error occured in /etc/rsyslog.d/mysql.conf, line 9:"if ($source contains 'switch_') then {" warning: selector line without actions will be discarded error -2142 parsing filter property - ignoring selector [try http://www.rsyslog.com/e/2142 ] the last error occured in /etc/rsyslog.d/mysql.conf, line 10:" :ommysql:127.0.0.1,Syslog,rsyslog,myPassword;switches" warning: selector line without actions will be discarded unknown priority name "" [try http://www.rsyslog.com/e/3000 ] the last error occured in /etc/rsyslog.d/mysql.conf, line 11:" stop" warning: selector line without actions will be discarded unknown priority name "" [try http://www.rsyslog.com/e/3000 ] the last error occured in /etc/rsyslog.d/mysql.conf, line 12:"}" warning: selector line without actions will be discarded So I changed the config to: if ($source contains 'switch_') then :ommysql:127.0.0.1,Syslog,rsyslog,myPassword;switches &~And it appears to be working now. Strange that the "stop" config didn't work. I'm on Debian v7.4 Wheezy and rsyslog is v5.8.11
the v7 config will not work on v5 David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
