[rsyslog] combine type="omfile" and outchannel using action

Hi, I am working on existing rsyslog configuration files in my project to adapt the old style usage to new one. I had referred to Module parameters for omfile but did not find any parameter matching my intent. Current: $outchannel Authlog,/var/log/auth.log,1050175078,/usr/bin/rsyslog-logrotate

Re: [rsyslog] combine type="omfile" and outchannel using action

est for it: https://github.com/rsyslog/rsyslog/issues/2479 Rainer 2018-02-14 11:37 GMT+01:00 putcha narayana via rsyslog : > Hi, > > I am working on existing rsyslog configuration files in my project to adapt > the old style usage to new one. > I had referred to Module paramete

[rsyslog] Question regarding imfile Input Parameters

Hi, For imfile input parameters the parameter Tag, is it applied while reading the file or on the content that is read from the file? Tag: The tag to be used for messages that originate from this file. Does the above imply while reading from file, Tag is used as some kind of filter or it is use

Re: [rsyslog] Question regarding imfile Input Parameters

Thank you David Lang for a quick response. Appreciate it. Lak. From: David Lang Sent: Wednesday, February 21, 2018 8:47 AM To: putcha narayana via rsyslog Cc: putcha narayana Subject: Re: [rsyslog] Question regarding imfile Input Parameters imfile assumes that

Re: [rsyslog] Question regarding imfile Input Parameters

rsyslog wrote: > Thank you David Lang for a quick response. > > Appreciate it. > > Lak. > > From: David Lang > Sent: Wednesday, February 21, 2018 8:47 AM > To: putcha narayana via rsyslog > Cc: putcha narayana > Subject: Re: [rsyslog

[rsyslog] regex when used in conf files is giving hard-time

Hi, rsyslog version: 8.26.0 Objective: Replace .cpp: with "" re_match, re_extract are throwing error when i use them in conf files. Code Sample: if ( $syslogseverity-text != 'debug') then { if re_match($msg, "[a-zA-Z0-9]+\.cpp:[0-9]+") then { set $!ext = r

Re: [rsyslog] regex when used in conf files is giving hard-time

Minor correction: :omfile:$testlog:FileFormat updated as :omfile:$testlog;FileFormat issue is not with this line though. just corrected the typo. Lak. From: rsyslog on behalf of putcha narayana via rsyslog Sent: Thursday, February 22, 2018 10:28 AM To

Re: [rsyslog] regex when used in conf files is giving hard-time

ot;"); :omfile:$testlog;FileFormat } else set $!msg = $msg; } ____________ From: rsyslog on behalf of putcha narayana via rsyslog Sent: Thursday, February 22, 2018 10:50 AM To: putcha narayana via rsyslog Cc: putcha narayana

Re: [rsyslog] regex when used in conf files is giving hard-time

______ From: rsyslog on behalf of putcha narayana via rsyslog Sent: Thursday, February 22, 2018 11:20 AM To: putcha narayana via rsyslog Cc: putcha narayana Subject: Re: [rsyslog] regex when used in conf files is giving hard-time Hi, I got the error out of the way \ had to be escaped. But the

Re: [rsyslog] regex when used in conf files is giving hard-time

m: rsyslog on behalf of deoren Sent: Friday, February 23, 2018 3:51 PM To: rsyslog@lists.adiscon.com Subject: Re: [rsyslog] regex when used in conf files is giving hard-time On 2/23/2018 3:19 AM, putcha narayana via rsyslog wrote: > Hello Experts, > > Any help on my query about re

[rsyslog] Seeking Help with variables

Hi I am set the variables and using them in filters. But the following are not working as expected or not working at all. Appreciate if you can share a working example or suggest what i am doing wrong. Not Working: set $!configuredseverity = "3"; if ($syslogseverity <= $configuredseverity) Defa

Re: [rsyslog] Seeking Help with variables

ively impact their testing. Thanks and Regards Lak. From: rsyslog on behalf of deoren Sent: Tuesday, February 27, 2018 3:06 PM To: rsyslog@lists.adiscon.com Subject: Re: [rsyslog] Seeking Help with variables On 2/27/2018 5:39 AM, putcha narayana via rsyslog wro

Re: [rsyslog] Seeking Help with variables

testlog,512000,/opt/vplat/bin/rsyslog-logrotate /var/log/testlog set $.configuredseverity = "6"; if ($syslogseverity <= $.configuredseverity) then { :omfile:$testlog;FileFormat } Thanks and Regards Lak. ____ From: rsyslog on behalf of putcha naraya

[rsyslog] Using local/global variables in templates

Hi, I have defined the templates (enclosed at the end of the mail) for logging locally into a file and to forward to remote syslog server. Question: For the "ForwardFormat" Template can we replace %HOSTNAME% with a variable. I am able to replace it with a fixed string. i.e., Replacing %HOST

Re: [rsyslog] Using local/global variables in templates

ame="ForwardFormat" type="string" string="<%PRI%>%TIMESTAMP:::date-rfc3339% %$.MYCUSTOMIZEDHOSTNAME%%syslogtag:1:32%%msg:::sp-if-no-1st-sp%%msg%\n") HTH Rainer 2018-03-15 5:31 GMT+01:00 putcha narayana via rsyslog : > Hi, > > > I have defined the template

Re: [rsyslog] Using local/global variables in templates

Hi, Gentle Reminder. Appreciate your help in resolving this request. Thanks in advance, Lak. From: rsyslog on behalf of putcha narayana via rsyslog Sent: Sunday, March 18, 2018 3:27 AM To: Rainer Gerhards; rsyslog-users Cc: putcha narayana Subject: Re

Re: [rsyslog] Using local/global variables in templates

i, Gentle Reminder. Appreciate your help in resolving this request. Thanks in advance, Lak. From: rsyslog mailto:rsyslog-boun...@lists.adiscon.com>> on behalf of putcha narayana via rsyslog mailto:rsyslog@lists.adiscon.com>> Sent: Sunday,

Re: [rsyslog] Using local/global variables in templates

ariables in templates as I said: We need your full config to help. Rainer 2018-03-20 5:50 GMT+01:00 putcha narayana mailto:putcha_l...@hotmail.com>>: Hi, Gentle Reminder. Appreciate your help in resolving this request. Thanks in advance, Lak. From:

Re: [rsyslog] Using local/global variables in templates

s Subject: Re: [rsyslog] Using local/global variables in templates as I said: We need your full config to help. Rainer 2018-03-20 5:50 GMT+01:00 putcha narayana mailto:putcha_l...@hotmail.com>>: Hi, Gentle Reminder. Appreciate your help in resolving this request. Thanks in adv

[rsyslog] Question about previous article "Adding the BOM to a message"

Hi, I noticed that in the article available at https://www.rsyslog.com/adding-the-bom-to-a-message/ Template does not have %$BOM% but the explanation has it. I believe %$BOM% is correct. Correct me if i am wrong. $template mytemplate,"<%PRI%>%TIMESTAMP:::date-rfc3339%%HOSTNAME% %SYSLOGTAG:1

[rsyslog] Urgent, need help with correct usage of local variables in an action

Hi, I am prepare templates to allow user to configure the IP and Port of Remote Syslog Server. In the templates hard coding IP works but when i assign the value to a local variable and use the variable in action it does not work as expected. Works fine: action(type="omfwd" Target="10.40.18.

Re: [rsyslog] Urgent, need help with correct usage of local variables in an action

quot; Target="$.IPADDRESS2" Port="$.PORTNUMBER2" Protocol="udp" Template="ForwardFormat") stop } Please guide me if the same can be achieved using alternate mechanisms. thanks and regards Lak. From: David Lang Sent: Tue

Re: [rsyslog] Urgent, need help with correct usage of local variables in an action

and Regards Lak. From: David Lang Sent: Tuesday, April 24, 2018 6:59 AM To: putcha narayana Cc: David Lang; putcha narayana via rsyslog Subject: Re: [rsyslog] Urgent, need help with correct usage of local variables in an action This cannot be done inside

Re: [rsyslog] Urgent, need help with correct usage of local variables in an action

og-users Cc: David Lang; putcha narayana Subject: Re: [rsyslog] Urgent, need help with correct usage of local variables in an action Of you insist on using local variables, the answer is: no, this does not work. Rainer Sent from phone, thus brief. putcha narayana via rsyslog mailto:rsyslo

Re: [rsyslog] Urgent, need help with correct usage of local variables in an action

scon.com>> Sent: Tuesday, April 24, 2018 8:23 AM To: rsyslog-users Cc: David Lang; putcha narayana Subject: Re: [rsyslog] Urgent, need help with correct usage of local variables in an action Of you insist on using local variables, the answer is: no, this does not work. Rainer Sent from phone,

Re: [rsyslog] Urgent, need help with correct usage of local variables in an action

Protocol="udp" > Template="ForwardFormat") > > > Thanks and Regards > > Lak. > > > > > > > From: Rainer Gerhards > Sent: Tuesday, April 24, 2018 8:23 AM > To: rsyslog-users > Cc: David Lang; putcha n

Re: [rsyslog] Urgent, need help with correct usage of local variables in an action

#action(type="omfwd" Target="11.11.11.11" Port="0" Protocol="udp" >> Template="ForwardFormat") >> >> >> Thanks and Regards >> >> Lak. >> >> >> >> >> >> ___

Re: [rsyslog] Urgent, need help with correct usage of local variables in an action

, need help with correct usage of local >> variables in an action >> >> Of you insist on using local variables, the answer is: no, this does not >> work. >> >> Rainer >> >> Sent from phone, thus brief. >> >> putcha narayana via rsyslo

Re: [rsyslog] Urgent, need help with correct usage of local variables in an action

rom phone, thus brief. >>> >>> putcha narayana mailto:putcha_l...@hotmail.com>> >>> schrieb am Di., 24. Apr. 2018, >>> 10:32: >>> >>> I believe it will be a good useful feature to allow users to define >>> local/global variables

Re: [rsyslog] Urgent, need help with correct usage of local variables in an action

if ($syslogseverity <= $.configuredSeverity) -- I could not find this usage easily in the documentation for 8.26.0. if ($syslogseverity <= "6") -- R.H.S value must be enclosed within "". I learn it the hardway. i assumed it is exactly like other languages C, java, JavaScript, bash, ruby, et

[rsyslog] signal based mechanism to read/re-read the configuration files

Hi, Is there a signal based mechanism to read/re-read the configuration files? As per my understanding, If the configuration files are updated or use the backticks option provided in latest update, rsyslogd has to be restarted as the rules are loaded once during startup. The signal based ap

Re: [rsyslog] Timestamp as per RFC5424

Dinesh, Try %TIMESTAMP:::date-utc% From: rsyslog on behalf of P.R.Dinesh via rsyslog Sent: Monday, June 11, 2018 12:56 PM To: rsyslog@lists.adiscon.com Cc: P.R.Dinesh Subject: [rsyslog] Timestamp as per RFC5424 I am creating a template for syslog messages a

[rsyslog] Need inputs on behavior observed w.r.t imudp and omfwd

Hi, We have a setup where there are multiple nodes generating application logs and events (a form of logs). On one of the node rsyslog is configured to use UDP (port: 1000). Call it Master On all nodes events are forwarded to the master using internalIP:1000 Master node also hosts Ethernet i

Re: [rsyslog] Need inputs on behavior observed w.r.t imudp and omfwd

Hi, We have a setup where there are multiple nodes generating application logs and events (a form of logs). I have attached the conf files used in the setup. I have a ticket against me and asked to provide explanation why without IPAddress in input for conf file, logs are printed in duplicate

Re: [rsyslog] Estimating the reliability of rsyslog service daemon on a host

I am also interested in knowing the answer for the following question - 3) What happens to log messages that applications on the same host send to a given local facility, when the rsyslogd service is down on that host? Are they lost/dropped, buffered (somewere) until rsyslogd is available again?