2016-12-20 11:54 GMT+01:00 mostolog--- via rsyslog <rsyslog@lists.adiscon.com>: > Must first line be... > > "version=2" (v lowercase)
this, see http://www.liblognorm.com/files/manual/configuration.html#rulebase-versions Rainer > > or > > "Version=2" (V uppercase) > > ? > > El 14/12/16 a las 10:44, mosto...@gmail.com escribió: > >> El 07/12/16 a las 21:00, Rainer Gerhards escribió: >>> >>> >>>> I'm getting /invalid field type 'alternative'/ when using it. Any ideas? >>>> >>>> rule=test:%[ >>>> {"type":"alternative","parser":[ >>>> {"type":"literal","text":"-"}, >>>> {"type":"word","name":"identd"} >>>> ]} >>>> ]% >>> >>> no idea >>> Did you Set Version=2 in the First line? >> >> Yes. >> > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.