2015-03-08 10:50 GMT+01:00 Rainer Gerhards <[email protected]>:
> 2015-03-07 2:25 GMT+01:00 David Lang <[email protected]>: > >> I've been running into a bunch of subtle config problems today none of >> which show up by running rsyslogd -N1 (running v8.8 on ubuntu) >> >> I've been seeing that the case of the parameter names matters, I thought >> they were squashed to lower case >> >> action(type="omfile" File="/var/log/pstats" name="pstats_local") >> >> didn't work but >> >> action(type="omfile" file="/var/log/pstats" name="pstats_local") >> >> did work >> >> I just tried this one ... and it worked for me. So let's start with the simple case. Can you mail me a debug log with the failure? Thanks, Rainer > Also, things that are documented as being default don't seem to actually >> work that way >> >> @10.1.50.64;structured_forwarding >> >> works >> >> action(type="omfwd" name="spoof-out" target="10.1.50.64" protocol="udp" >> template="structured_forwarding") >> >> doesn't work >> >> action(type="omfwd" name="spoof-out" target="10.1.50.64" port="514" >> protocol="udp" template="structured_forwarding") >> >> does work. >> >> The documentation page says: >> >> Port [Default 514] >> >> this both says that I shouldn't need to put it in, and if I put it in >> with a capial 'P' it would work. >> >> > all of this sounds indeed *very* strange. Will have a look... > > Rainer > >> David Lang >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. >> > > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
