Hi,

I noticed some syntax difference between RHEL and Debian 8.39. This worked in 
Debian 9, but threw an error in RHEL7
:programname, isequal, "cron" /sa/rsyslog/messages.cron.all
:programname, startswith, "CRON" /sa/rsyslog/messages.cron.all stop

On RHEL7
# rsyslogd -N1
rsyslogd: version 8.39.0, config validation run (level 1), master config 
/etc/rsyslog.conf
rsyslogd: invalid character in selector line - ';template' expected [v8.39.0]
rsyslogd: error during parsing file /etc/rsyslog.conf, on or before line 95: 
errors occured in file '/etc/rsyslog.conf' around line 95 [v8.39.0 try 
http://www.rsyslog.com/e/2207 ]

For this to work in RHEL7 I did,
:programname, isequal, "cron" /sa/rsyslog/messages.cron.all
:programname, isequal, "cron" stop
:programname, startswith, "CRON" /sa/rsyslog/messages.cron.all
:programname, startswith, "CRON" stop

Or, I tried to make rsyslog do something it should not be doing... ;)


Best wishes,
Sophie

> -----Original Message-----
> From: rsyslog [mailto:[email protected]] On Behalf Of
> sophie.loewenthal--- via rsyslog
> Sent: Friday, December 07, 2018 10:58 AM
> To: Michael Biebl; rsyslog-users
> Cc: LOEWENTHAL Sophie
> Subject: Re: [rsyslog] Rsyslog Debian repository - outdated
> 
> I can see it, and have installed it.
> 
> Thank-you Micheal
> 
> Best wishes,
> Sophie
> 
> > -----Original Message-----
> > From: Michael Biebl [mailto:[email protected]]
> > Sent: Thursday, December 06, 2018 10:06 PM
> > To: rsyslog-users
> > Cc: LOEWENTHAL Sophie
> > Subject: Re: [rsyslog] Rsyslog Debian repository - outdated
> >
> > I've uploaded 8.39.0 to stretch-backports.
> > It should be available at your mirrors soon.
> > Am Mi., 5. Dez. 2018 um 13:51 Uhr schrieb sophie.loewenthal--- via
> > rsyslog <[email protected]>:
> > >
> > > > -----Original Message-----
> > > > Sent: Wednesday, December 05, 2018 1:50 PM
> > > > To: rsyslog-users
> > > >
> > > > Hi,
> > > >
> > > > The last version for the Debian repository was for Wheezy with
> > rsyslog_8.27.0-
> > > > 1_amd64.deb  Is there a  Debian 9 repository with rsyslog 8.3.9?
> > > >
> > > > https://www.rsyslog.com/debian-repository/
> > > >
> > >
> > > Note that v 8.3.8 is available in Stretch backports, but it does mean 
> > > that I
> > cannot have the latest, bar compiling it myself.
> > > This message and any attachments (the "message") is
> > > intended solely for the intended addressees and is confidential.
> > > If you receive this message in error,or are not the intended recipient(s),
> > > please delete it and any copies from your systems and immediately notify
> > > the sender. Any unauthorized view, use that does not comply with its
> purpose,
> > > dissemination or disclosure, either whole or partial, is prohibited. 
> > > Since the
> > internet
> > > cannot guarantee the integrity of this message which may not be reliable,
> BNP
> > PARIBAS
> > > (and its subsidiaries) shall not be liable for the message if modified, 
> > > changed
> or
> > falsified.
> > > Do not print this message unless it is necessary, consider the 
> > > environment.
> > >
> > > ---------------------------------------------------------------------------------------------
> --
> > -----------------------------------
> > >
> > > Ce message et toutes les pieces jointes (ci-apres le "message")
> > > sont etablis a l'intention exclusive de ses destinataires et sont 
> > > confidentiels.
> > > Si vous recevez ce message par erreur ou s'il ne vous est pas destine,
> > > merci de le detruire ainsi que toute copie de votre systeme et d'en 
> > > avertir
> > > immediatement l'expediteur. Toute lecture non autorisee, toute utilisation
> de
> > > ce message qui n'est pas conforme a sa destination, toute diffusion ou 
> > > toute
> > > publication, totale ou partielle, est interdite. L'Internet ne permettant 
> > > pas
> > d'assurer
> > > l'integrite de ce message electronique susceptible d'alteration, BNP 
> > > Paribas
> > > (et ses filiales) decline(nt) toute responsabilite au titre de ce message 
> > > dans
> > l'hypothese
> > > ou il aurait ete modifie, deforme ou falsifie.
> > > N'imprimez ce message que si necessaire, pensez a l'environnement.
> > >
> > > _______________________________________________
> > > rsyslog mailing list
> > > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > > http://www.rsyslog.com/professional-services/
> > > What's up with rsyslog? Follow https://twitter.com/rgerhards
> > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad 
> > > of
> > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T
> > LIKE THAT.
> >
> >
> >
> > --
> > Why is it that all of the instruments seeking intelligent life in the
> > universe are pointed away from Earth?
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
> LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to