Hi there!
First, i want to ask: why there is no documentation for this module?
Two, why registration on forum is under basic authentication?

I use ommysql with this configuration  and this is worked:

$template SQLWithProcessID,"insert into SystemEvents (Message, Facility, 
FromHost, Priority, DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag, 
ProcessID) values ('%msg%', %syslogfacility%, '%HOSTNAME%', %syslogpriority%, 
'%timereported:::date-mysql%', '%timegenerated:::date-mysql%', %iut%, 
'%syslogtag:R,ERE,1,FIELD:([a-zA-Z\/]+)(\[[0-9]{1,5}\])*:--end%', 
'%syslogtag:R,ERE,1,BLANK:\[([0-9]{1,5})\]--end%')",sql
module(load="ommysql")
action(type="ommysql" 
         server="localhost"
         serverport="3306"
         db="Syslog"
         uid="rsyslog"
         pwd="HIDDEN"
         template="SQLWithProcessID")

But when i change to ompgsql like this:

module(load="ompgsql")
action(type="ompgsql" 
         server="localhost"
         serverport="5432"
         db="Syslog"
         uid="rsyslog"
         pwd="HIDDEN")

I get this error in messages:

Sep 18 02:24:31 backup rsyslogd-2209: module name 'ompgsql' is unknown [try  
http://www.rsyslog.com/e/2209 ]
Sep 18 02:24:31 backup rsyslogd-2207: error during parsing file 
/etc/rsyslog.d/ompgsql.conf, on or before line 9: errors occured in file 
'/etc/rsyslog.d/ompgsql.conf' around line 9 [try  http://www.rsyslog.com/e/2207

But when i wrote this config:

module(load="ompgsql")
*.* :ompgsql:localhost,Syslog,rsyslog,HIDDEN

All works as expected.

I save this config file to /etc/rsyslog.d/ompgsql.conf
My system is Gentoo, rsyslog-7.6.3.

Also. how to convert template SQLWithProcessID to use with PostgreSQL?
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to