great, thx for letting me know. Just for others who find this thread. The previous handling was also invalid, as it always evaluated to true. So this was a config error which was not detected due to the bug that got corrected in 8.2202. It's not a regression.
Rainer El jue, 17 feb 2022 a las 11:40, Ángel L. Mateo Martínez (<[email protected]>) escribió: > > Yes, I have changed the condition to the numeric value and it works again. > Thank you Rainer. > > ________________________________________ > De: Rainer Gerhards <[email protected]> > Enviado: jueves, 17 de febrero de 2022 11:22 > Para: Ángel L. Mateo Martínez > Cc: rsyslog-users > Asunto: Re: [rsyslog] RELP does not work since updated to 8.2202 version > > This is the culprit: > > if $syslogseverity <= 'info' then { > > You compare a numerical entity ($syslogseverity) to a string. > Previously there was a bug with some comparison types. I assume that > with the bug, this always evaluated to true, the fixed version > evaluates to false. Please compare against the numerical severity. > This should fix it. > > Rainer > > El jue, 17 feb 2022 a las 11:13, Ángel L. Mateo Martínez > (<[email protected]>) escribió: > > > > Yes, sure. Here it is. > > > > I have also try to downgrade one server from 8.2202 to 8.2001.0-1ubuntu1.1 > > (the version provided with Ubuntu 20.04). After this, relp is working again > > (without any change in configuration). > > > > ________________________________________ > > De: Rainer Gerhards <[email protected]> > > Enviado: jueves, 17 de febrero de 2022 10:58 > > Para: rsyslog-users > > Cc: Ángel L. Mateo Martínez > > Asunto: Re: [rsyslog] RELP does not work since updated to 8.2202 version > > > > can you provide a debug log? > > > > Rainer > > > > El jue, 17 feb 2022 a las 10:58, Ángel L. Mateo Martínez via rsyslog > > (<[email protected]>) escribió: > > > > > > Hello, > > > > > > Yesterday my servers were updated from 8.2112 to 8.2202 version. Since > > > then, RELP connection between my servers and the syslog concentrator is > > > not working. > > > > > > I've been looking for any error running syslog but I have found nothing. > > > I can't see neither any traffic on port 20514 (the port I use for relp), > > > not even a TCP SYNC packet. > > > > > > This is part of my config related with this: > > > > > > if $syslogseverity <= 'info' then { > > > call send_json_to_pitufo3x > > > } > > > > > > ruleset (name="send_json_to_pitufo3x" > > > ) { > > > ... > > > > > > action(type="omrelp" > > > name="forward_json_to_pitufo31" > > > queue.spoolDirectory="/var/spool/rsyslog" > > > queue.type="LinkedList" > > > queue.saveonshutdown="on" > > > queue.maxdiskspace="200M" > > > queue.size="200000" > > > queue.discardmark="160000" > > > queue.discardseverity="5" > > > action.resumeRetryCount="-1" > > > target="pitufo31.um.es" > > > port="20514" > > > template="JsonPitufo3xFormat" > > > queue.filename="logspitufo31_fwd" > > > ) > > > > > > ... > > > } > > > > > > Any idea? > > > > > > Thanks > > > _______________________________________________ > > > rsyslog mailing list > > > https://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > > DON'T LIKE THAT. _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
