I have to correct myself, liblognorm Version 1.1.2 or higher is needed. Regards, Andre
> -----Ursprüngliche Nachricht----- > Von: Andre Lorbach [mailto:[email protected]] > Gesendet: Donnerstag, 10. März 2016 09:43 > An: rsyslog-users > Betreff: AW: [rsyslog] problem with leap year and unixtimestamp template > option > > Which Version of liblognorm is installed? > For rsyslog 8.17 we need newer version V1.1.3. > > Packages for Ubuntu, Redhat and Debian are up to date in our repositories. > > > Best regards, > Andre Lorbach > > > -----Ursprüngliche Nachricht----- > > Von: [email protected] [mailto:rsyslog- > > [email protected]] Im Auftrag von Rainer Gerhards > > Gesendet: Mittwoch, 9. März 2016 23:02 > > An: rsyslog-users > > Betreff: Re: [rsyslog] problem with leap year and unixtimestamp > > template option > > > > This looks like a too old version of liblognorm. I need to check with > the > > package guys why this is not automatically updated. Andre? Florian? > > > > Rainer > > > > Sent from phone, thus brief. > > Am 09.03.2016 19:33 schrieb "Joe Blow" <[email protected]>: > > > > > Hey all, > > > > > > After the update to 8.17 to fix this, i'm now getting this when > > > mmnormalize > > > loads: > > > > > > rsyslogd-2066: could not load module > > > '/lib64/rsyslog/mmnormalize.so', > > > dlopen: /lib64/rsyslog/mmnormalize.so: undefined symbol: > > > ln_setErrMsgCB > > > [v8.17.0 try http://www.rsyslog.com/e/2066 ] > > > > > > Any fix? This basically broke our elasticsearch parsing. > > > > > > Thanks in advance. > > > > > > Cheers, > > > > > > JB > > > > > > On Wed, Mar 2, 2016 at 12:12 PM, Rainer Gerhards > > > <[email protected] > > > > > > > wrote: > > > > > > > 2016-03-02 16:51 GMT+01:00 Peter Portante > > <[email protected]>: > > > > > And it appears to also affect the "$date-ordinal" property. Can > > > > > you confirm? > > > > > > > > Yeah, right because it uses the same helper function. But so the > > > > same fix fixes that issue as well. But... having said that, it's > > > > probably better to add some tests for it to the testbench as well. > > > > > > > > Thanks for bringing it up. > > > > > > > > Rainer > > > > > > > > > > On Wed, Mar 2, 2016 at 10:47 AM, Peter Portante < > > > > [email protected]> > > > > > wrote: > > > > > > > > > >> Hi Rainer, > > > > >> > > > > >> Does this also affect ommongodb use? > > > > >> > > > > >> -peter > > > > >> > > > > >> > > > > >> On Wed, Mar 2, 2016 at 6:11 AM, Rainer Gerhards < > > > > [email protected]> > > > > >> wrote: > > > > >> > > > > >>> Hi all, > > > > >>> > > > > >>> I just wanted to let you know that we have found an issue with > > > > >>> the unixtimestamp formatting option in leap years. The problem > > > > >>> started on March, 1st and will persist till the end of the year. > > > > >>> The timestamp > > > is > > > > >>> one day in the past. > > > > >>> > > > > >>> A patch is available here, it shall probably work with almost > > > > >>> all rsyslog versions: > > > > >>> > > > > >>> > > > > > > > > > > https://github.com/rgerhards/rsyslog/commit/ffb321f1698a971e0acda48caf > > > a97bb344cf0829 > > > > >>> > > > > >>> Full details can be found in this issue tracker: > > > > >>> https://github.com/rsyslog/rsyslog/issues/830 > > > > >>> > > > > >>> Note that I will NOT release a 8.16.1 version for this fix. > > > > >>> Usually, > > > I > > > > >>> would have done so, but the 8.17.0 release is due next Tuesday > > > > >>> and will probably available as RC on friday. Given the fact > > > > >>> that I would need at least one additional day to craft 8.16.1, > > > > >>> I don't think this makes much sense. > > > > >>> > > > > >>> Distro packages (and other users as well, of course) can apply > > > > >>> above-mentioned short patch. I actually suggest to do so, as > > > > >>> this problem exists, I think, in all versions supporting the > > > > >>> "unixtimestamp" formatting option (side-note: v5.8 does not > > > > >>> have this option). > > > > >>> > > > > >>> Rainer > > > > >>> _______________________________________________ > > > > >>> rsyslog mailing list > > > > >>> http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > >>> http://www.rsyslog.com/professional-services/ > > > > >>> What's up with rsyslog? Follow https://twitter.com/rgerhards > > > > >>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED > > > > >>> by a > > > > myriad > > > > >>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT > > > > >>> POST if > > > you > > > > >>> DON'T LIKE THAT. > > > > >>> > > > > >> > > > > >> > > > > > _______________________________________________ > > > > > rsyslog mailing list > > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > > http://www.rsyslog.com/professional-services/ > > > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > > > NOTE > > > > > WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > > myriad > > > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > > > > you DON'T LIKE THAT. > > > > _______________________________________________ > > > > rsyslog mailing list > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > http://www.rsyslog.com/professional-services/ > > > > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE > > > > WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > > > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT > > > > POST if you DON'T LIKE THAT. > > > > > > > _______________________________________________ > > > rsyslog mailing list > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE > > > WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > > > you DON'T LIKE THAT. > > > > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: > > This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites > beyond > > our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE > THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
