yup, thx - the FAQ was actually never right :-( I fixed it.
Rainer 2018-07-06 10:50 GMT+02:00 Peter Viskup via rsyslog <rsyslog@lists.adiscon.com>: > After rewrote of omfwd action from old-style to rainer-script with > binding custom template according to information from FAQ article [1], > the error messages pointing to misconfiguration: > > Jul 6 10:29:38 127.0.0.1 syslog.err rsyslogd-2207:error during > parsing file /etc/rsyslog.d/30-forward-logstash.conf, on or before > line 3: invalid character ';' - is there an invalid escape sequence > somewhere? [v8.15.0 try http://www.rsyslog.com/e/2207 ] > Jul 6 10:29:38 127.0.0.1 syslog.err rsyslogd-3000:user name > 'rawmsgFo...' too long - ignored [v8.15.0] > Jul 6 10:29:38 127.0.0.1 syslog.err rsyslogd-2207:error during > parsing file /etc/rsyslog.d/30-forward-logstash.conf, on or before > line 3: warnings occured in file > '/etc/rsyslog.d/30-forward-logstash.conf' around line 3 [v8.15.0 try > http://www.rsyslog.com/e/2207 ] > > The action was configured as follows: > *.* action(type="omfwd" > ...... > queue.saveonshutdown="on");rawmsgForward > > After rewrite to > queue.saveonshutdown="on" > template="rawmsgForward") > the rsyslog do not report parsing error > > Seems the FAQ article should be updated to point to use of template > parameter for omfwd actions as listed in module documentation [2]. > > [1] https://www.rsyslog.com/how-to-bind-a-template/ > [2] https://www.rsyslog.com/doc/v8-stable/configuration/modules/omfwd.html > > -- > Peter > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
