https://www.rsyslog.com/doc/v8-stable/configuration/conf_formats.html
HTH Rainer El vie., 9 nov. 2018 a las 9:30, sophie.loewenthal--- via rsyslog (<[email protected]>) escribió: > > > -----Original Message----- > > From: David Lang [mailto:[email protected]] > > Sent: Thursday, November 08, 2018 10:30 PM > > To: sophie.loewenthal--- via rsyslog > > Cc: LOEWENTHAL Sophie > > Subject: Re: [rsyslog] Code verification : legacy to new format > > > > On Thu, 8 Nov 2018, sophie.loewenthal--- via rsyslog wrote: > > > > > Hi, > > > > > > This seems to work for me, but I'd be grateful if somebody would confirm > > > this > > is actually correct. > > > Dump all nrpe messages into a file, and once done discard. > > > > > > * Legacy format > > > :programname, isequal, "nrpe" /app/rsyslog/messages.nrpe.all > > > :programname, isequal, "nrpe" & > > > > > > * New format > > > if ( $programname == "nrpe" ) then { > > > action(type="omfile" file="/app/rsyslog/messages.nrpe.all" > > flushOnTXEnd="off") > > > stop > > > } > > > > This works, but I'll point out that the following also works > > > > if ( $programname == "nrpe" ) then { > > /app/rsyslog/messages.nrpe.all > > stop > > } > > > > you don't have to switch everything to use action(), the general > > recommendation > > is taht if it's a single line in the legacy format, and it's at least as > > clear > > as the new format, go ahead and use the legacy format. > > > > It's when you have things that are multiple lines of config in the old > > format > > (setting lots of $foo lines and then having the line that they affect) that > > the > > old format becomes confusing and you should switch to the new format. There > > are > > also new features available in the action() syntax, but if the old format > > does > > what you want, you aren't using the new feature :-) > > > > David Lang > > Hi David, > I presumed incorrectly that the legacy format was deprecated and would be > obsolete later. If this is not the case, I'm happy to mix these syntaces > together. > This message and any attachments (the "message") is > intended solely for the intended addressees and is confidential. > If you receive this message in error,or are not the intended recipient(s), > please delete it and any copies from your systems and immediately notify > the sender. Any unauthorized view, use that does not comply with its purpose, > dissemination or disclosure, either whole or partial, is prohibited. Since > the internet > cannot guarantee the integrity of this message which may not be reliable, BNP > PARIBAS > (and its subsidiaries) shall not be liable for the message if modified, > changed or falsified. > Do not print this message unless it is necessary, consider the environment. > > ---------------------------------------------------------------------------------------------------------------------------------- > > Ce message et toutes les pieces jointes (ci-apres le "message") > sont etablis a l'intention exclusive de ses destinataires et sont > confidentiels. > Si vous recevez ce message par erreur ou s'il ne vous est pas destine, > merci de le detruire ainsi que toute copie de votre systeme et d'en avertir > immediatement l'expediteur. Toute lecture non autorisee, toute utilisation de > ce message qui n'est pas conforme a sa destination, toute diffusion ou toute > publication, totale ou partielle, est interdite. L'Internet ne permettant pas > d'assurer > l'integrite de ce message electronique susceptible d'alteration, BNP Paribas > (et ses filiales) decline(nt) toute responsabilite au titre de ce message > dans l'hypothese > ou il aurait ete modifie, deforme ou falsifie. > N'imprimez ce message que si necessaire, pensez a l'environnement. > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
