Re: [rsyslog] Avoid invld PRI and force a valid PRI

2018-04-25 Thread Rainer Gerhards
t; On Wed, 25 Apr 2018, Simon Lundström wrote: > >> Date: Wed, 25 Apr 2018 09:19:19 +0200 >> >> From: Simon Lundström <si...@su.se> >> Reply-To: rsyslog-users <rsyslog@lists.adiscon.com> >> To: rsyslog-users <rsyslog@lists.adiscon.com> >> Subje

Re: [rsyslog] Avoid invld PRI and force a valid PRI

2018-04-25 Thread David Lang
;si...@su.se> Reply-To: rsyslog-users <rsyslog@lists.adiscon.com> To: rsyslog-users <rsyslog@lists.adiscon.com> Subject: Re: [rsyslog] Avoid invld PRI and force a valid PRI Ah, I'm sorry I wasn't clear. We're only running Ubuntu LTSes so 8.16.0 is the highest version which an LTS suppo

Re: [rsyslog] Avoid invld PRI and force a valid PRI

2018-04-25 Thread Simon Lundström
pr 2018 08:32:34 +0200 From: Simon Lundström <si...@su.se> Reply-To: rsyslog-users <rsyslog@lists.adiscon.com> To: rsyslog-users <rsyslog@lists.adiscon.com> Subject: Re: [rsyslog] Avoid invld PRI and force a valid PRI Any idea how to use the replace capability, automatic or not

Re: [rsyslog] Avoid invld PRI and force a valid PRI

2018-04-25 Thread David Lang
to the current version David Lang On Wed, 25 Apr 2018, Simon Lundström wrote: Date: Wed, 25 Apr 2018 08:32:34 +0200 From: Simon Lundström <si...@su.se> Reply-To: rsyslog-users <rsyslog@lists.adiscon.com> To: rsyslog-users <rsyslog@lists.adiscon.com> Subject: Re: [rsyslog] Avoid i

Re: [rsyslog] Avoid invld PRI and force a valid PRI

2018-04-25 Thread Simon Lundström
Any idea how to use the replace capability, automatic or not, in the versions specified at the ubuntu page below? BR, - Simon On Mon, 2018-04-23 at 08:34:11 +0200, Simon Lundström wrote: On Fri, 2018-04-20 at 10:53:46 +0200, Rainer Gerhards wrote: which rsyslog version do you have? I think

Re: [rsyslog] Avoid invld PRI and force a valid PRI

2018-04-23 Thread Simon Lundström
On Fri, 2018-04-20 at 10:53:46 +0200, Rainer Gerhards wrote: which rsyslog version do you have? I think current ones have an automatic replace capability, but I am not 100% sure. That wildly differs, but everything available in Ubuntu e.g, so that's everything listed here:

Re: [rsyslog] Avoid invld PRI and force a valid PRI

2018-04-20 Thread Rainer Gerhards
which rsyslog version do you have? I think current ones have an automatic replace capability, but I am not 100% sure. Rainer 2018-04-20 10:32 GMT+02:00 Simon Lundström : > Hey all! > > We have some devices which can't be easily fixed which uses an > invalid/incorrect syslog PRI.

[rsyslog] Avoid invld PRI and force a valid PRI

2018-04-20 Thread Simon Lundström
Hey all! We have some devices which can't be easily fixed which uses an invalid/incorrect syslog PRI. rsyslogd sets these as e.g.: 2018-04-20T10:19:49.973793+02:00 central.syslog.server 2018-04-20T10:19:49+02:00 server.which.syslogged <198>Apr 20 10:19:49 server.which.syslogged program: