Yes, I have changed the condition to the numeric value and it works again. 
Thank you Rainer.

________________________________________
De: Rainer Gerhards <[email protected]>
Enviado: jueves, 17 de febrero de 2022 11:22
Para: Ángel L. Mateo Martínez
Cc: rsyslog-users
Asunto: Re: [rsyslog] RELP does not work since updated to 8.2202 version

This is the culprit:

if $syslogseverity <= 'info' then {

You compare a numerical entity ($syslogseverity) to a string.
Previously there was a bug with some comparison types. I assume that
with the bug, this always evaluated to true, the fixed version
evaluates to false. Please compare against the numerical severity.
This should fix it.

Rainer

El jue, 17 feb 2022 a las 11:13, Ángel L. Mateo Martínez
(<[email protected]>) escribió:
>
> Yes, sure. Here it is.
>
> I have also try to downgrade one server from 8.2202 to 8.2001.0-1ubuntu1.1 
> (the version provided with Ubuntu 20.04). After this, relp is working again 
> (without any change in configuration).
>
> ________________________________________
> De: Rainer Gerhards <[email protected]>
> Enviado: jueves, 17 de febrero de 2022 10:58
> Para: rsyslog-users
> Cc: Ángel L. Mateo Martínez
> Asunto: Re: [rsyslog] RELP does not work since updated to 8.2202 version
>
> can you provide a debug log?
>
> Rainer
>
> El jue, 17 feb 2022 a las 10:58, Ángel L. Mateo Martínez via rsyslog
> (<[email protected]>) escribió:
> >
> > Hello,
> >
> > Yesterday my servers were updated from 8.2112 to 8.2202 version. Since 
> > then, RELP connection between my servers and the syslog concentrator is not 
> > working.
> >
> > I've been looking for any error running syslog but I have found nothing. I 
> > can't see neither any traffic on port 20514 (the port I use for relp), not 
> > even a TCP SYNC packet.
> >
> > This is part of my config related with this:
> >
> > if $syslogseverity <= 'info' then {
> >   call send_json_to_pitufo3x
> > }
> >
> > ruleset (name="send_json_to_pitufo3x"
> > ) {
> >    ...
> >
> >    action(type="omrelp"
> >     name="forward_json_to_pitufo31"
> >     queue.spoolDirectory="/var/spool/rsyslog"
> >     queue.type="LinkedList"
> >     queue.saveonshutdown="on"
> >     queue.maxdiskspace="200M"
> >     queue.size="200000"
> >     queue.discardmark="160000"
> >     queue.discardseverity="5"
> >     action.resumeRetryCount="-1"
> >     target="pitufo31.um.es"
> >     port="20514"
> >     template="JsonPitufo3xFormat"
> >     queue.filename="logspitufo31_fwd"
> >   )
> >
> >   ...
> >  }
> >
> > Any idea?
> >
> > Thanks
> > _______________________________________________
> > rsyslog mailing list
> > https://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com/professional-services/
> > What's up with rsyslog? Follow https://twitter.com/rgerhards
> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
> > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T 
> > LIKE THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to