2014-09-15 21:12 GMT+02:00 Nick Syslog <[email protected]>: > No error message, I just can't seem to get that filter to apply. > > Well, you really should make sure you don't throw away rsyslog error messages in rsyslog.conf. This is what I (*.* /file) get:
Sep 16 11:59:51 ubuntu1204vm [syslog.err<43>] rsyslogd-3003:error -3003 compare value property - ignoring selector [try http://www.rsyslog.com/e/3003 ] Sep 16 11:59:51 ubuntu1204vm [syslog.err<43>] rsyslogd:the last error occured in /home//proj/rsyslog/rg.conf, line 9:":source , !isequal , $myhostname ~" Sep 16 11:59:51 ubuntu1204vm [syslog.err<43>] rsyslogd:warning: selector line without actions will be discarded I've quickly checked the doc, and the comparison parameter must be a constant string. Rainer > I'll perform a debug soon enough but I was curious if this was one of those > cases I had to use something peculiar as I do in 8.X like $$myhostname or > %MYHOSTNAME% > > On Mon, Sep 15, 2014 at 11:58 AM, Rainer Gerhards <[email protected]> > wrote: > > > Whats the error message and complete conf? > > > > Sent from phone, thus brief. > > Am 15.09.2014 20:32 schrieb "Nick Syslog" <[email protected]>: > > > > > Would anyone know how I would get the $myhostname variable to work > > > appropriately under the following syntax > > > > > > > > > :source , !isequal , $myhostname ~ > > > > > > > > > For whatever reason I can't seem to get this variable and filter > > > combination to work appropriately. > > > _______________________________________________ > > > rsyslog mailing list > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad > > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > > DON'T LIKE THAT. > > > > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > DON'T LIKE THAT. > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
