In any case, you should get an error message from rsyslog. I suggest to not throw them away but record somewhere ;) A good way to not lose this error messages on a journal-enabled system is to use
global(processInternalMessages="off") see: http://www.rsyslog.com/doc/v8-stable/rainerscript/global.html As David said, imjournal may not support rulesets. Rainer 2016-03-23 0:41 GMT+01:00 David Lang <[email protected]>: > On Thu, 17 Mar 2016, Eugene Prokopiev wrote: > >> 2016-03-17 7:57 GMT+03:00 Eugene Prokopiev : >>> >>> 2016-03-16 20:08 GMT+03:00 David Lang : >>> >>>> you can also create a ruleset and put a queue on the ruleset with the >>>> new >>>> syntax, then put the postgres output in that ruleset. It's not as pretty >>>> as >>>> the new action() syntax directly, but it's a lot better than the old >>>> queue >>>> syntax. >>> >>> >>> Can you show me example of such configuration (ruleset with queue and >>> postgres output)? >> >> >> It looks like impossible to send systemd-journald events to ruleset. I >> tried module(load="imjournal" ruleset="events") and >> input(type="imjournal" ruleset="events"), but nothing arrived. Events >> from input(type="imudp" port="514" ruleset="events") arrived >> successfully. > > > that's possible, not all inputs support rulesets. > > David Lang > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
