8.24 is about a 4 year old version (with some backported fixes by RedHat) that
is no longer supported by the community. Please try a more up to date vesion
That said, I have never seen the 19.* format used before, so I'm surprised that
it works.
I would suggest logging the problem messages with the template
RSYSLOG_DebugFormat as there is probably something in the log entry that is not
what you are thinking that it is.
David Lang
On Fri, 19 Mar 2021, Scott Slattery via rsyslog wrote:
Date: Fri, 19 Mar 2021 16:22:21 -0700
From: Scott Slattery via rsyslog <[email protected]>
To: rsyslog-users <[email protected]>
Cc: Scott Slattery <[email protected]>
Subject: [rsyslog] Logging issue using facility local3
I have a rule as follows that will not work if I attempt to use the
symbolic representation for local3 facility. I can change the priority to
anything I want and it will not log to either the local logfile nor will it
be forwarded to the remote server.
local3.* {
action(type="omfwd" target="10.40.46.198" port="10514"
protocol="tcp")
action(type="omfile" file="/var/log/local3.log")
}
However, If I instead use the numeric equivalent value for local3
(LOG_LOCAL3=19) from syslog.h, it works fine, logging to both the local
file as well as forwarding to my remote server.
19.* {
action(type="omfwd" target="10.40.46.198" port="10514"
protocol="tcp")
action(type="omfile" file="/var/log/local3.log")
}
Has anyone else experienced this issue?
I'm running rsyslog version:
rsyslogd 8.24.0-34.el7, compiled with:
PLATFORM: x86_64-redhat-linux-gnu
PLATFORM (lsb_release -d):
FEATURE_REGEXP: Yes
GSSAPI Kerberos 5 support: Yes
FEATURE_DEBUG (debug build, slow code): No
32bit Atomic operations supported: Yes
64bit Atomic operations supported: Yes
memory allocator: system default
Runtime Instrumentation (slow code): No
uuid support: Yes
Number of Bits in RainerScript integers: 64
thanks,
*Scott Slattery*
*Sr. Systems & Cloud Architect*
*Cloud, Compute, Information & Architecture Team*
motorolasolutions.com
*O: 602.529.8226*
*E*: [email protected]
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
