I will send when I get to the office. I can tell you the config is parsed without error when I remove the ruleset, which is why I suspected it was the issue. Does adding a ruleset trigger a change in how the config is parsed?
On Sep 13, 2014 1:21 AM, Rainer Gerhards <[email protected]> wrote: Full config pls. Sent from phone, thus brief. Am 13.09.2014 02:48 schrieb "Devin Christensen" < [email protected]>: > I'm getting parsing errors when adding a ruleset to my rsyslog > configuration. Here are all the variations I have tried. > > > * ruleset(name="rulesetname"); > * ruleset(name="rulesetname") > * Ruleset(name="rulesetname") > * Ruleset(Name="rulesetname") > * ruleset(Name="rulesetname") > * ruleset(name="rulesetname") { } > * ruleset(name="rulesetname") { > } > * ruleset(name="rulesetname") { > }; > > The documentation seems to indicate that at least one of those should > work, not sure what I've overlooked. > > I've tried versions 7.6.3 and 7.6.4 of rsyslog. I'm on Ubuntu 12.04.3. The > error message given is: > > rsyslogd: error during parsing file /etc/rsyslog.conf, on or before line > 27: syntax error on token 'module(' [try http://www.rsyslog.com/e/2207 ] > rsyslogd: CONFIG ERROR: could not interpret master config file > '/etc/rsyslog.conf'. [try http://www.rsyslog.com/e/2207 ] > rsyslogd: run failed with error -2207 (see rsyslog.h or try > http://www.rsyslog.com/e/2207 to learn what that number means) > This email message is for the sole use of the intended recipient(s) and > may contain confidential, proprietary and privileged information. Any > unauthorized review, use, disclosure or distribution is prohibited. If you > are not the intended recipient, please contact the sender by reply email > and destroy all copies of the original message. If you are the intended > recipient, please be advised that the content of this message is subject to > access, review and disclosure by the sender's Email System Administrator. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. This email message is for the sole use of the intended recipient(s) and may contain confidential, proprietary and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. If you are the intended recipient, please be advised that the content of this message is subject to access, review and disclosure by the sender's Email System Administrator. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
