to be
created a solution.
Rainer
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Jan-Frode Myklebust
Sent: Monday, August 27, 2007 11:07 PM
To: rsyslog@lists.adiscon.com
Subject: Re: [rsyslog] per programname logs
On 2007-08-27, Rainer Gerhards [EMAIL
Michael,
As I've written in the other post, that'll probably happen next week
(Because I can not access the code right now). But possibly some other
folks pick it up an fix it ;)
Rainer
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Michael
What theinric posts is the current work-around for this situation.
There is nothing I can add to it - except some insight into the future
plans: we plan to support full boolean expression trees of any
complexity. However, the future enhanced config file format must be
fixed first (see my blog at
I have checked on fulltime, it is an error in sample.conf - there is no
need for this option and I think it was actually not present. I'll
remove that sample.
Rainer
-Original Message-
From: [EMAIL PROTECTED] [mailto:rsyslog-
[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent:
Patrick,
thanks for this report, it is useful. Unfortunately, I had hoped that an
assertion failed, which was obviously not the case. I have looked at the
code in question, but the root cause seems to be different. It looks
like the code that actually aborted was just affected by something
that
:05 PM
To: rsyslog-users
Subject: Re: [rsyslog] 1.19.6 updated
On Tue, Sep 11, 2007 at 05:46:54PM +0200, Rainer Gerhards wrote:
Just for your info: I detected one bug that occurred during bug
fixing.
I fixed it and re-published 1.19.6 with the same version number
because
I saw now
] [mailto:rsyslog-
[EMAIL PROTECTED] On Behalf Of Raoul Bhatia [IPAX]
Sent: Friday, September 14, 2007 10:07 AM
To: rsyslog-users
Subject: Re: [rsyslog] some logged lines end with #000
Rainer Gerhards wrote:
Ummm... should have thought about this. NULs are treated special.
This
is routed
, September 17, 2007 5:48 PM
To: Rainer Gerhards
Cc: theinric
Subject: Re: [rsyslog] rsyslog segfaults?
On Mon, 2007-09-17 at 14:51 +0200, Rainer Gerhards wrote:
Hi all,
may I ask if those of you that experienced the segfault problem could
re-produce it with 1.19.6? Any feedback would
PROTECTED] [mailto:rsyslog-
[EMAIL PROTECTED] On Behalf Of Andrew Pantyukhin
Sent: Wednesday, September 19, 2007 10:55 AM
To: rsyslog-users
Subject: Re: [rsyslog] rsyslog segfaults?
On Mon, Sep 17, 2007 at 02:51:10PM +0200, Rainer Gerhards wrote:
Hi all,
may I ask if those of you
To those of you that experience the problem: I just got note that the
problem possibly disappears in single-threading mode. We are looking at
this. In the mean time, you may want to use
./configure --disable-pthreads
I just thought I pass this around.
Rainer
12:42 PM
To: rsyslog-users
Subject: Re: [rsyslog] rsyslog 1.19.7 released
On Tue, Sep 25, 2007 at 11:46:14AM +0200, Rainer Gerhards wrote:
Hi all,
Rsyslog 1.19.7 (the official one) has been released today. It
contains
some code updated compared to the version from yesterday, so please
As always, feedback is appreciated.
Rainer Gerhards
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
show stopper until
then.
Thanks all for testing, comments and patches! (I so far applied
Michael's only, is it seems to cover everything else - but I'll do
further review now) :)
Rainer
On Wed, 2007-10-10 at 19:33 +0200, Michael Biebl wrote:
2007/10/10, Rainer Gerhards [EMAIL PROTECTED
-
From: [EMAIL PROTECTED] [mailto:rsyslog-
[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Thursday, October 11, 2007 12:37 PM
To: rsyslog-users
Subject: Re: [rsyslog] experimental 1.19.9 tarball
Hi,
just a few additions to Michael's patch.
Rainer Gerhards wrote:
Hi Michael
of it) they see.
Change Log:
http://www.rsyslog.com/Article135.phtml
Download:
http://www.rsyslog.com/Downloads-req-getit-lid-61.phtml
As always, feedback is appreciated.
Rainer Gerhards
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo
Oops, sorry, that was my fault. Mildew made me aware of the x64 tendency
and asked if I had any other (non-x64 reports). I said no - and
obviously screwed up. So it is me to blame ;)
And: thanks for the feedback, this brings us onto the right track!
Rainer
-Original Message-
From:
@lists.adiscon.com
Subject: Re: [rsyslog] rsyslog 1.20.0 preview available
On Tue, 4 Dec 2007 11:23:26 +0100
Rainer Gerhards [EMAIL PROTECTED] wrote:
Feedback is highly appreciated. If I updated the tarball, I'll
announce that. Oh, yes, doc is not finished yet, so do not wonder...
Just
are seing?
Rainer
-Original Message-
From: [EMAIL PROTECTED] [mailto:rsyslog-
[EMAIL PROTECTED] On Behalf Of Rainer Gerhards
Sent: Tuesday, December 11, 2007 12:01 PM
To: rsyslog-users
Subject: Re: [rsyslog] Last Message repeated N times
Hi Stephen,
I was totally swamped the past
Re-released, info follows soon...
-Original Message-
From: [EMAIL PROTECTED] [mailto:rsyslog-
[EMAIL PROTECTED] On Behalf Of Rainer Gerhards
Sent: Wednesday, December 12, 2007 9:04 PM
To: rsyslog-users
Subject: Re: [rsyslog] rsyslog 1.20.1 released
Hold for a moment, the actual
Lol... the initial message seems not to have passed my spam filter... ;)
I, too, tend to option three. The problem, though is
backwards-compatibility... Any suggestions and concerns are appreciated.
I'll look at the code to see how much work that creates. I think the
complexity is quite
] Problems with IncludeConfig
2007/12/14, Michael Biebl [EMAIL PROTECTED]:
2007/12/13, Rainer Gerhards [EMAIL PROTECTED]:
Lol... the initial message seems not to have passed my spam
filter... ;)
I, too, tend to option three. The problem, though is
Yeah, it's the most flexible one
Hi all,
thanks to mildew, I could create another fix that may solve the issue. I
will do a writeup of what happens, but that'll take a short while. In
the mean time, I would appreciate if those of you that experience the
segfault could try the new version. I have released a pre-1.20.2 tarball
at
i would use the opportunity and not hesitate to use a
make-everything-right-even-if-we-break-something approach.
upgrading seems to not be trivial, as one needs to go through the
config
files anyway. so lets do things right and maybe issue some
error/warning
message on obsolete options
on the usual places on
www.rsyslog.com.
As always, feedback is appreciated.
Rainer Gerhards
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
2007/12/19, Michael Biebl [EMAIL PROTECTED]:
2007/12/19, Rainer Gerhards [EMAIL PROTECTED]:
Download links and changelog can be found on the usual places on
www.rsyslog.com.
Download link seems to be missing.
Ah, seems to be there now.
--
Why is it that all of the instruments
Could you post your rsyslog.conf please. Without seeing it, it sounds
like you sync the disc with every write. Unfortunately, this is the
legacy default. You can turn it off with placing a dash before the
selector line:
e.g. *.* /var/log/whatever
syncs after each write, while
*.*
:[EMAIL PROTECTED] On Behalf Of Scott Baker
Sent: Thursday, December 20, 2007 10:47 PM
To: rsyslog-users
Subject: Re: [rsyslog] Separating logs by host?
Rainer Gerhards wrote:
Looks like doc can need some more guides ;)
Does this help: http://www.rsyslog.com/Article60.phtml
Excellent
: Re: [rsyslog] Separating logs by host?
Rainer Gerhards wrote:
I need to think about the real question a bit ;) Not an immediate
solution ... but not hopeless either ;)
On v2/v3 - v2 will be the next stable release:
http://rgerhards.blogspot.com/2007/12/begun-working-on-rsyslog-
v3
Hi all,
I have just reached a stage where everything in rsyslog 3.0.0 is a bit
stable. I thought it would be good to release a preview before I begin
to pull some other code and place it in its own module. There are
already a number of input plugins, so I think looking at that code
provides a
[snp]
The config I used it almost exactly what you provided...
$template dsl, /var/log/cisco-dsl-%$NOW%.log
:FROMHOST, startswith, 10.3. -?dsl
Am I missing something basic?
I forgot the quotes around the template string ;) That should work (not
tested, though):
$template
: Friday, December 21, 2007 6:56 PM
To: rsyslog-users
Subject: Re: [rsyslog] Separating logs by host?
Rainer Gerhards wrote:
I forgot the quotes around the template string ;) That should work
(not
tested, though):
$template dsl, /var/log/cisco-dsl-%$NOW%.log
:FROMHOST, startswith
by host?
Rainer Gerhards wrote:
Debug mode is the keyword here ;)
Add -d -n to the command line and run it interactively with stdout
redirected to a file. Maybe I've made a mistake with the directives,
maybe we have another issue. Debug output can get quite large, please do
not send
PROTECTED] On Behalf Of
Rainer Gerhards
Sent: Monday, December 24, 2007 7:59 PM
To: rsyslog-users
Subject: Re: [rsyslog] Hostname matching with DNS
Really quick: check the HOSTNAME (or so ;)) property.
- Ursprüngliche Nachricht -
Von: Scott Baker [EMAIL PROTECTED]
An: rsyslog
There is a bug in 3.10.1 - will re-release soon, please stand by...
Rainer
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
Hi all,
there was an issue when $WorkDirectory was not set. It lead to an
immediate segfault upon startup. This is now corrected and re-released.
If in doubt, have a look at the md5 sum.
Sorry for any inconvenience. I'd appreciate if some could try out 3.10.1
as feedback would be very valuable.
Hi all,
Michael Biebl pointed out a problem in rsyslog 3.10.2 release build. It
does not compile due to a problem in obj-types.h.
I will provide a fix today, most probably in form of a new version which
is mostly ready. I'll timeout this noon.
Sorry for any hassle - and thanks for reporting!
Hi all,
I have re-released 3.10.2:
http://www.rsyslog.com/Downloads-req-getit-lid-73.phtml
I noticed that I may get into trouble having a solid 3.10.3 by noon
today ;)
Rainer
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
Hi all,
I have added a rsyslog vs. syslog-ng feature comparison sheet to the doc
set:
http://www.rsyslog.com/doc-rsyslog_ng_comparison.html
I would appreciate if those familiar with syslog-ng's features (I am
not!) could have a look at it and tell me which bullet points are
missing. I try to
-Original Message-
From: [EMAIL PROTECTED] [mailto:rsyslog-
[EMAIL PROTECTED] On Behalf Of Michael Biebl
Sent: Wednesday, January 30, 2008 8:49 PM
To: rsyslog-users
Subject: Re: [rsyslog] rsyslog/syslog-ng comparison
2008/1/30, Rainer Gerhards [EMAIL PROTECTED]:
Hi all,
I
Of Michael Biebl
Sent: Thursday, January 31, 2008 10:56 PM
To: rsyslog-users
Subject: Re: [rsyslog] announcing rsyslog 3.11.0 - first open
source diskbuffering syslogd
2008/1/31, Rainer Gerhards [EMAIL PROTECTED]:
it is a great pleasure for me to do a fully buzzword-compliant
announcement
is appreciated.
Best regards,
Rainer Gerhards
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
/Downloads-req-getit-lid-77.phtml
I hope this release is useful.
Rainer Gerhards
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
Hi all,
a first version of the text file input plugin is available as a preview.
Please find details at:
http://www.rsyslog.com/PNphpBB2-viewtopic-t-188.phtml
Thanks,
Rainer
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
I just posted a new, enhanced preview:
http://download.rsyslog.com/rsyslog/rsyslog-3.11.2-pre.tar.gz
md5sum: d7b7d20d6a67fc03872edd42684f0468
Feedback is appreciated,
Rainer
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
://www.rsyslog.com/Downloads-req-getit-lid-79.phtml
I hope this release is useful. As always, feedback is appreciated.
Best regards,
Rainer Gerhards
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
There are actually two timestamps. timereported is taken from the
message, but it requires that the sender included a timestamp (not all
do). timegenerated is the time the message was received. The default
templates use timereported, as far as I remember. If it's important
and you are in doubt,
-
[EMAIL PROTECTED] On Behalf Of Michael Biebl
Sent: Monday, February 18, 2008 3:39 PM
To: rsyslog-users
Subject: Re: [rsyslog] Doubt in syslog.
2008/2/18, Rainer Gerhards [EMAIL PROTECTED]:
Disclaimer:
This message and the information contained herein is proprietary
Hi all,
I have just been able to find the one of the uttermost pieces of carp
that the wrotten patent system has produced. May I introduce you to
Miao's genius invention for the syslog protocol:
http://www.freepatentsonline.com/EP1881668.html
As a side-note, it has quite some technical flaws
Hi all,
I have had a couple of discussions with a lot of folks in the past days.
During them, an idea was born that I would now like to present to the
broader audience here on the list:
We consider dual-licensing rsyslog, just like e.g. MySQL is dual
licensed. Nothing is yet finalized and I
Hi folks,
please have a look at
http://rgerhards.blogspot.com/2008/02/introducing-rainerscript-and-some.
html
Feedback is appreciated.
Thanks,
Rainer
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
Hi all,
I'd like to ask for feedback. Currently, message properties are case
sensitive. See
http://www.rsyslog.com/doc-property_replacer.html
for a complete list. I have to admit I think I was a fool when I made
them case-sensitive. I am currently thinking about making them
case-insensitive.
and a funny thing
namedrainerscript
2008/2/23, Rainer Gerhards [EMAIL PROTECTED]:
Hi folks,
please have a look at
http://rgerhards.blogspot.com/2008/02/introducing-rainerscript-and-
some.
html
Feedback is appreciated.
While looking at
http://www.rsyslog.com/doc
Hi Michael,
thanks for the feedback. I have probably misunderstood the change, I
will talk with the contributors. For the time being, please all consider
this to be a bug.
Rainer
-Original Message-
From: [EMAIL PROTECTED] [mailto:rsyslog-
[EMAIL PROTECTED] On Behalf Of Michael Biebl
That was a tough decision ;) I finally took Michael's patch, as it is
pointing into the same direction that the rsyslog loader is heading...
Now in CVS. I think I'll release a bugfix version later today, but I
will also work a bit on the doc, which also is sub-optimal in 3.11.5...
Rainer
Just let us get to an understanding of features, howto once we have
settle on a version:
-Original Message-
From: [EMAIL PROTECTED] [mailto:rsyslog-
[EMAIL PROTECTED] On Behalf Of Gerrard Geldenhuis
Sent: Tuesday, February 26, 2008 1:43 PM
To: rsyslog-users
Subject: [rsyslog]
Hi all,
this is for the developer folks among you. Once again I would like to
ask for some feedback on future rsyslog directions. I will soon begin to
work on the rsyslog loader. The loader will complete plugin support,
as it will allow modules to dynamically load other modules. For example,
this
Hi all,
I wanted to make you aware that the rsyslog project will move to git for
its source control. I plan to do this move some time during the next two
weeks (depending on development workload). I will send out another note
shortly before the actual date but wanted to make you all aware about
for this.
Changelog:
http://www.rsyslog.com/Article183.phtml
Download:
http://www.rsyslog.com/Downloads-req-getit-lid-83.phtml
I hope this release is useful. Best regards,
Rainer Gerhards
___
rsyslog mailing list
http://lists.adiscon.net/mailman
Hi all,
as promised, I have just released rsyslog 3.12.0. It has one new major
feature, and that is complex expression support inside filters. For
example, you can now do the following [all of this is on *one* line]:
if $syslogfacility-text == 'local0' and $msg startswith 'DEVNAME' and
($msg
:04 PM
To: rsyslog-users
Subject: Re: [rsyslog] rsyslog moving to git
Rainer Gerhards wrote:
I wanted to make you aware that the rsyslog project will move to git
for
its source control. I plan to do this move some time during the next
two
weeks (depending on development workload). I
-Original Message-
From: [EMAIL PROTECTED] [mailto:rsyslog-
[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Monday, March 03, 2008 3:07 PM
To: rsyslog@lists.adiscon.com
Subject: [rsyslog] Selector and MySQL
Hi all,
i tried to write data into a DB with a selector
in
Hi all,
is there anybody on this list with (open) Solaris? I installed a system
and tried to compile rsyslog on it, but I can't get the environment
ready :(
I somebody is in the know, advise would deeply be appreciated (if not,
that's a good indication I still do not need to care about Solaris,
Mark,
it looks like message format received is somewhat invalid. Rsyslog tries
to parse according to rfc 3164 but also applies legacy legacy parsing if
it finds a way to do so. If you could provide me a wireshark capture of
the message, I could see if I can modify the parser.
HOWEVER, that
Hi Johnn,
On Wed, 2008-03-05 at 19:49 -0500, Johnny Tan wrote:
I want to have logs written locally (the way they usually
are) as well as sent to a central logger.
The two situations that I want local logs for are:
1) in case the central logger is not available for any
reason, I don't
Hi all,
thanks to HP's testdrive, I got rsyslog to compile and basically run on
HP UX. My testing abilities on the testdrive are limited (non-root
access), but I was successfully able to receive a UDP syslog message and
store it to a file. So the engine and the plugins seem to run quite OK.
If
://www.rsyslog.com/Article187.phtml
As always, feedback is appreciated.
Rainer Gerhards
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
I am not so involved with logwatch. Let me ask feature-wise: what
capabilities do you need to do the job?
Rainer
-Original Message-
From: [EMAIL PROTECTED] [mailto:rsyslog-
[EMAIL PROTECTED] On Behalf Of Stephen Carville
Sent: Thursday, March 06, 2008 6:54 PM
To: rsyslog-users
I think nobody has added descriptions so far, but maybe that changes now ;)
On the file logs - I suggest you look into imfule, that sound much cleaner and
reliable to me than the logger trick.
rainer
- Ursprüngliche Nachricht -
Von: Johnny Tan [EMAIL PROTECTED]
An: rsyslog-users
Hi all, and especially JF and Michael,
Good discussion, please keep the thoughts flowing :)
Let me start by tell you I am guilty of a much broader view of what a
syslogd can do than most people probably have. To me, a syslogd
processes *system events* and that's much more than just those pieces
: Re: [rsyslog] wiki with various application logging examples
On 2008-03-09, Rainer Gerhards [EMAIL PROTECTED] wrote:
Now let me take on the imfile example. The key point - at least IMHO
-
is that there is no single line in rsyslog core's code that has been
added in support of imfile
contribute use cases.
Thanks,
Raiener
-Original Message-
From: [EMAIL PROTECTED] [mailto:rsyslog-
[EMAIL PROTECTED] On Behalf Of Johnny Tan
Sent: Sunday, March 09, 2008 1:15 AM
To: rsyslog-users
Subject: Re: [rsyslog] wiki with various application logging examples
Rainer Gerhards
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Maurizio Rottin
Sent: Tuesday, March 11, 2008 1:02 PM
To: rsyslog@lists.adiscon.com
Subject: [rsyslog] rsyslog with apache and per vhost log
Hi all,
i set up an apache webserver wich logs with
[happy snip]
just one question, do you know any way to pass the website name in
/usr/bin/logger -p local5.err -t error_www.mysite.com, even using an
other program...i know only logger...
Well, you could use the imfile plugin to read the log files directly:
I need to check for the restart problem (currently working on something
else). Please also follow this bug:
http://bugzilla.adiscon.com/show_bug.cgi?id=48
This is the one message lost problem, and I have created at least some
cure for it today (to be verified). Will check your bug report when I
Argh, some config parsing seems to be wrong. There is a problem with the
config file. The right config format is this:
==
$WorkDirectory /tmp/rsyslogwork
$ActionQueueType LinkedList
$ActionQueueFileName dqueue
$ActionQueueSaveOnShutdown on
$ActionQueueDiscardSeverity 7
$ActionResumeInterval 10
for all users of the rsyslog v2 branch.
Download:
http://www.rsyslog.com/Downloads-req-getit-lid-85.phtml
Changelog:
http://www.rsyslog.com/Article189.phtml
As always, feedback is appreciated.
Rainer Gerhards
___
rsyslog mailing list
http
PROTECTED]
An: rsyslog-users rsyslog@lists.adiscon.com
Gesendet: 12.03.08 19:32
Betreff: Re: [rsyslog] actionqueue in front of tcp forward
Rainer Gerhards wrote:
$WorkDirectory /tmp/rsyslogwork
Also, I should also point out that I NEVER see anything show
up in my WorkDirectory. That directory
Of Johnny Tan
Sent: Wednesday, March 12, 2008 8:08 PM
To: rsyslog-users
Subject: Re: [rsyslog] actionqueue in front of tcp forward
Rainer Gerhards wrote:
Can you send me a ful debug output from the sender when
it fails (maybe via mail) - if thats possible...
I sent it via YouSendIt.
Thanks
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Johnny Tan
Sent: Wednesday, March 12, 2008 10:06 PM
To: rsyslog-users
Subject: Re: [rsyslog] actionqueue in front of tcp forward
Rainer Gerhards wrote:
I have received the file and had a chance
[snip]
Not really...i don't want to use logger, it becomes a heavy process
under high traffic loadbut this should be a question for the
apache ML...
OK, I don't know what makes it a heavy process... anyhow... If you come
up with an explanation or what would be less resource-intense
Maybe in another 5 years RELP will replace rfc 3195 especially.
Doesn't really matter ;)
For the technially interested folks: I have drafted an intial spec.
Still a lot is missing (of course), but it sufficient to solve the
stunnel problem that we saw yesterday (and a couple of others...):
Mmm...
So the 5,000 line file doesn't make it completely to the server? That's
strange... With the larger file, I'd assume that there are some flow
control issues, but with the small one...
Maybe it is related to the other problem with the hostname. Kind of
sounds like it looses sync some
Hi all,
I got the following bug report (and patch - thx) for situation where the
syslog tag is larger than 32 characters.
http://bugzilla.adiscon.com/show_bug.cgi?id=50
Syslog rfcs prohibit such oversize tags. However, I think seeing them in
practice triggers the question if we should really
-Original Message-
From: [EMAIL PROTECTED] [mailto:rsyslog-
[EMAIL PROTECTED] On Behalf Of Jan-Frode Myklebust
Sent: Friday, March 14, 2008 12:28 AM
To: rsyslog@lists.adiscon.com
Subject: [rsyslog] rsyslog on RHEL5u2 ?
Looks like rsyslogd will be available in RHEL5u2 !
I was busy with the other things today but had a quick look. I can repro
the hup problem. Looks like it is related to the new object loader (and
specifically the unloader), I guess it will be a relatively easy fix ...
on Monday ;)
Will look into the memleak after that.
Thanks for reporting.
Good discussion, thanks all :) ... some more points below ...
I have asked the question on a local lug to get some more opinions.
I
will post the results if any here.
I did the same. :)
The only arguments against removal I have received until now were:
1. DoS (but nobody explained
The only arguments for keeping the feature that I got on my lug was
the
preservartion of disk/network IO.
Did you get any feeling of how important this is being considered?
I think to prevent DOS attacks is a valid argument but as you said can
be easily circumvented by randomizing
/3/20, Rainer Gerhards [EMAIL PROTECTED]:
Let me try to avoid the regexp (its expensive and I can not debug it
now
;)): so you search for the string that is at the start of the msg
and
delimited by the first space?
Rainer
-Original Message-
From: [EMAIL PROTECTED
(my error).
Waiting for your confirmation of the above,
Radu Gheorghiu
Rainer Gerhards wrote:
Ah, ok, so the problem actually is that fromhost is empty...
- Ursprüngliche Nachricht -
Von: Radu Gheorghiu [EMAIL PROTECTED]
An: rsyslog-users rsyslog@lists.adiscon.com
Gesendet
Well... Rsyslog tries all kind of things to get hold of the real host.
So if you could send me a copy of the one causing problems, I may (may
;)) be able to do something against it. HOSTNAME should always contain
something usable, but as you say ... it depends ;)
Rainer
-Original
that i
sent you? Or did i miss something?
Radu
Rainer Gerhards wrote:
Well... Rsyslog tries all kind of things to get hold of the real
host.
So if you could send me a copy of the one causing problems, I may
(may
;)) be able to do something against it. HOSTNAME should always
contain
, 2008 6:14 PM
To: rsyslog-users
Subject: Re: [rsyslog] Property-Based Filters
Hmm i think i don't understand . Haven't you received the file that i
sent you? Or did i miss something?
Radu
Rainer Gerhards wrote:
Well... Rsyslog tries all kind of things to get hold of the real
host.
So
@lists.adiscon.com
Cc: Rainer Gerhards
Subject: Re: [rsyslog] rsyslog version numbering - was: RE: rsyslog
3.0.0 stable? - feedback, please
Hi,
politicalmajor.major.minor.patchlevel seems good to me.
politicalmajor - something great happened, like v2 and v3
major - odd, even - developer/stable
Hi all,
I got an interesting question from another discussion list.
As you (hopefully) are aware, rsyslog supports high precision
timestamps. However, the default format does not output them in order to
avoid confusing log parsers. That, in turn, leads to few people actually
ever using it. So in
@lists.adiscon.com
Subject: Re: [rsyslog] central logserver log rotation
On 2008-03-27, Rainer Gerhards [EMAIL PROTECTED] wrote:
the typical solution seems to be to include a date-specific part in
the
filename:
/var/log/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%
And clean up the directories every
If I look at the migration case, I am tempted to do a one-time move
to
4.0.x.x (stable) and 4.1.x.x (devel) and drop the v3 tree (flagged
as
interim devel release) to prevent any confusion about version
numbers.
Changing from a 3-number to a 4-number scheme within the same major
what about the following major.minor.patchlevel with 3.x.y as an
exception, used as:
STABLE RELEASES
===
1) release 3.x.y (e.g. 3.12.0) as stable.
we might continue providing patches, fixes, etc. in a fashion like:
- 3.12.0 (= stable)
- 3.13.0 (= major fix)
- 3.14.0 (= major
In the long term (think tank!) it may be possible do some automagic with
dynafiles. Let's say specify a timeout after which, when no longer
accessed, some (external) rotation logic is invoked. The good thing,
probably, would be that rsyslog knows best when it can and need to do
so. It could even
PROTECTED] [mailto:rsyslog-
[EMAIL PROTECTED] On Behalf Of Michael Biebl
Sent: Saturday, March 29, 2008 3:16 PM
To: rsyslog-users
Subject: Re: [rsyslog] rsyslog version numbering
2008/3/29, Michael Biebl [EMAIL PROTECTED]:
2008/3/29, Rainer Gerhards [EMAIL PROTECTED]:
I needed some
optimum this time.
But now on to the real meat (and thanks for sticking around on this
topic! ;))...
Rainer Gerhards wrote:
This has some subtleties for me, too (well, maybe its not really
subtleties but simply frightening me ;)). Let me try to get this
back
to
a simple path. How about a simple
1 - 100 of 5201 matches
Mail list logo
