Re: [rsyslog] rsyslog 7.3.8 (v7-devel) released

2013-03-20 Thread Rainer Gerhards
-Original Message- From: rsyslog-boun...@lists.adiscon.com [mailto:rsyslog- boun...@lists.adiscon.com] On Behalf Of Michael Biebl Sent: Tuesday, March 19, 2013 5:32 PM To: rsyslog-users Subject: Re: [rsyslog] rsyslog 7.3.8 (v7-devel) released 2013/3/19 Rainer Gerhards

Re: [rsyslog] How to get the app name (when it includes slashes) ?

2013-03-20 Thread Rainer Gerhards
On Tue, 2013-03-19 at 19:37 +0100, Philippe Muller wrote: Hi, I try to get a coherent names for programs who send messages to rsyslog. For most messages, $app-name or $programname do the job (I get $syslogtag without the trailing [pid]:). However, $app-name/$programname does not play well

Re: [rsyslog] MongoDB PHP Driver Extensions is not installed

2013-03-20 Thread Andre Lorbach
Perhaps you got the wrong php.ini? There is one for apache only usually located at /etc/php5/apache2/php.ini Best regards, Andre Lorbach -Original Message- From: rsyslog-boun...@lists.adiscon.com [mailto:rsyslog- boun...@lists.adiscon.com] On Behalf Of Chris Roberts Sent: Dienstag,

Re: [rsyslog] libestr 0.1.5 released

2013-03-20 Thread Andre Lorbach
RPM and Ubuntu Packages for libestr have been update das well. Best regards, Andre Lorbach -Original Message- From: rsyslog-boun...@lists.adiscon.com [mailto:rsyslog- boun...@lists.adiscon.com] On Behalf Of Florian Riedl Sent: Dienstag, 19. März 2013 17:26 To:

Re: [rsyslog] How to get the app name (when it includes slashes) ?

2013-03-20 Thread Philippe Muller
On Wed, Mar 20, 2013 at 10:44 AM, Rainer Gerhards rgerha...@hq.adiscon.comwrote: On Tue, 2013-03-19 at 19:37 +0100, Philippe Muller wrote: Hi, I try to get a coherent names for programs who send messages to rsyslog. For most messages, $app-name or $programname do the job (I get

Re: [rsyslog] MongoDB PHP Driver Extensions is not installed

2013-03-20 Thread Chris Roberts
Andre, Thanks again for your help. It looks like I edited the php.ini under /etc/php5/cli/php.ini instead of the one in the path you specified. I added extension=mongo.so under the Dynamic Extensions section of the file, saved it, then restarted apache2 and it works! Chris On Wed, Mar 20, 2013

Re: [rsyslog] libestr 0.1.5 released -- v7-devel Ubuntu Precise repo not signed

2013-03-20 Thread Andre Lorbach
The Release.gpg should from now on be available, can you verify / test this? Best regards, Andre Lorbach -Original Message- From: rsyslog-boun...@lists.adiscon.com [mailto:rsyslog- boun...@lists.adiscon.com] On Behalf Of Nathan Stratton Treadway Sent: Mittwoch, 20. März 2013 14:44

Re: [rsyslog] Feedback Request: merge patch? (especially BSD users, pls)

2013-03-20 Thread David Lang
On Wed, 20 Mar 2013, Rainer Gerhards wrote: Hi folks, I have a merge request[1] which I am a bit skeptic about. I have hoped the the original poster would come up with a better solution, but this does not happen. The patch intends to change facility names on BSD platforms. The end result

[rsyslog] Max Message Size

2013-03-20 Thread Rodrian, Logan P (IS)
Hello- I am using rsyslog across machines to send logs. I have the $MaxMessageSize global directive set on both machines to 4096 (4k). Using wireshark between the machines, I can see that the message text I am trying to send (2694) is transmitted in its entirety. However, the syslog log

Re: [rsyslog] Max Message Size

2013-03-20 Thread Boylan, James
You need to set that at the top of your config to have that actually take effect. I ran into this same problem. For simplicity sake make it the first line of your config. -- James -Original Message- From: rsyslog-boun...@lists.adiscon.com [mailto:rsyslog-boun...@lists.adiscon.com]

Re: [rsyslog] Max Message Size

2013-03-20 Thread David Lang
On Wed, 20 Mar 2013, Boylan, James wrote: You need to set that at the top of your config to have that actually take effect. I ran into this same problem. For simplicity sake make it the first line of your config. A more complete answer is that the config option only affects inputs after it

[rsyslog] property replacer and regexps

2013-03-20 Thread Gary Foster
Let's say I want to set an arbitrary variable in my rsyslog.conf based upon a regexp match against the incoming message. For example (warning, completely contrived examples incoming): incoming message is foo:bar=10:bazblah:blah:blah I want to do something like: set %!somevar = bar (why?

Re: [rsyslog] property replacer and regexps

2013-03-20 Thread David Lang
Version 7 has added the ability to set variables that you can use later, earlier versions do not have that capability. now, exactly _how_ to set it from a regex is something I would have to dig further on. David Lang On Wed, 20 Mar 2013, Gary Foster wrote: Date: Wed, 20 Mar 2013 14:30:17

Re: [rsyslog] property replacer and regexps

2013-03-20 Thread Philippe Muller
The syntax is: set $!var = foo; unset $!var; (don't forget the trailing ;) I don't know how to set it from a regex, but if you simply want to split a string based on a delimiter, you can use the field() function. For example, you can get the second part of a string delimited by slashes (/) : set

Re: [rsyslog] property replacer and regexps

2013-03-20 Thread Gary Foster
Yeah I already know how to set/unset etc (I'm doing that in other places). Fields won't work because the data I'm getting in is incredibly poorly structured, and pulling it out via a regex is the most tenable way of doing it. Bear in mind I do subscribe to the philosophy I've got a problem…