sry, I misunderstood the conversation. So on the machine with the old version, it works, but on the new not. OK.
In this case, can you create a debug log on CentOS8 and post it? https://www.rsyslog.com/doc/master/troubleshooting/debug.html Rainer El vie, 9 jul 2021 a las 11:07, Daniel Pocock via rsyslog (<[email protected]>) escribió: > > > > On 09/07/2021 11:01, Rainer Gerhards wrote: > > what does RSYSLOG_DebugFormat look on Ubuntu with 8.32? > > > > Debug line with all properties: > FROMHOST: 'something.example.org', fromhost-ip: '1.2.3.4', HOSTNAME: > 'something', PRI: 30, > syslogtag 'lt-reConServer[37142]:', programname: 'lt-reConServer', > APP-NAME: 'lt-reConServer', PROCID: '37142', MSGID: '-', > TIMESTAMP: 'Jul 9 11:03:41', STRUCTURED-DATA: '-', > msg: ' @cee: > {"hostname":"something.example.org","pri":"DEBUG","syslog!pri":6,"time":"2021-07-09T09:03:41.513601990Z","pname":"lt-reConServer","subsys":"RECON","proc!id":37142,"proc!tid":139892894497408,"file!name":"Conversation.cxx","file!line":45,"msg":"Conversation > created, handle=1"}' > escaped msg: ' @cee: > {"hostname":"something.example.org","pri":"DEBUG","syslog!pri":6,"time":"2021-07-09T09:03:41.513601990Z","pname":"lt-reConServer","subsys":"RECON","proc!id":37142,"proc!tid":139892894497408,"file!name":"Conversation.cxx","file!line":45,"msg":"Conversation > created, handle=1"}' > inputname: imtcp rawmsg: '<30>Jul 9 11:03:41 some-host > lt-reConServer[37142]: @cee: > {"hostname":"something.example.org","pri":"DEBUG","syslog!pri":6,"time":"2021-07-09T09:03:41.513601990Z","pname":"lt-reConServer","subsys":"RECON","proc!id":37142,"proc!tid":139892894497408,"file!name":"Conversation.cxx","file!line":45,"msg":"Conversation > created, handle=1"}' > $!:{ "hostname": "something.example.org", "pri": "DEBUG", "syslog!pri": > 6, "time": "2021-07-09T09:03:41.513601990Z", "pname": "lt-reConServer", > "subsys": "RECON", "proc!id": 37142, "proc!tid": 139892894497408, > "file!name": "Conversation.cxx", "file!line": 45, "msg": "Conversation > created, handle=1" } > $.: > $/: > > _______________________________________________ > rsyslog mailing list > https://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
