On Tue, 12 Aug 2014, James Lay wrote:
Seeing:
rsyslogd-3003: invalid or yet-unknown config file command - have you
forgotten to load a module? [try http://www.rsyslog.com/e/3003 ]
rsyslogd: the last error occured in /etc/rsyslog.d/60-bro.conf, line
8:"$InputFilePollingInterval 1"
I have $ModLoad imfile in my /etc/rsyslog.conf file. The below is what I'm
trying:
$InputFileName /media/backup/bro/current/conn.log
$InputFileTag bro_conn:
$InputFileStateFile stat-bro_conn
$InputFileSeverity info
$InputFileFacility local7
$InputRunFileMonitor
$InputFilePollingInterval 1
local7.* @x.x.x.x:514
Now...my version of rsyslog is 5.8.6-1ubuntu8.6. The above works with
7.4.4-1ubuntu2....do I need to upgrade in order to get this to fly? Thank
you.
probably, check the version of the documentation that ships with ubuntu, if it
doesn't mention it, then it's been added since that version.
You really should upgrade anyway, 5.8.6 is very old and there have been huge
improvements between then and the current 8.x
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.