Public bug reported: rsyslog has a parser module for Cisco IOS formatted syslog messages: https://www.rsyslog.com/doc/master/configuration/modules/pmciscoios.html https://github.com/rsyslog/rsyslog/tree/master/plugins/pmciscoios
It has been in rsyslog since early days (8.3.4); Bionic has 8.16.0. However, the Ubuntu Bionic package of rsyslog neither compiles pmciscoios into the binary, nor includes it as a loadable module. To replicate, try these lines in /etc/rsyslog.conf: module(load="pmciscoios") $RulesetParser rsyslog.ciscoios and restart rsyslog; you get these errors Mar 8 21:54:39 noc rsyslogd-2066: could not load module '/usr/lib/rsyslog/pmciscoios.so', dlopen: /usr/lib/rsyslog/pmciscoios.so: cannot open shared object file: No such file or directory [v8.16.0 try http://www.rsyslog.com/e/2066 ] Mar 8 21:54:39 noc rsyslogd-2159: error: parser 'rsyslog.ciscoios' unknown at this time (maybe defined too late in rsyslog.conf?) [v8.16.0 try http://www.rsyslog.com/e/2159 ] There is "pmcisconames.so", but that is something else: https://github.com/rsyslog/rsyslog/blob/master/contrib/pmcisconames/pmcisconames.c # dpkg-query -L rsyslog | grep pm.*so /usr/lib/rsyslog/pmaixforwardedfrom.so /usr/lib/rsyslog/pmlastmsg.so /usr/lib/rsyslog/pmsnare.so /usr/lib/rsyslog/pmcisconames.so There doesn't appear to be a separate package with the module: # apt-cache search rsyslog ... Upstream Debian bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929608 ProblemType: Bug DistroRelease: Ubuntu 16.04 Package: rsyslog 8.16.0-1ubuntu3.1 ProcVersionSignature: Ubuntu 4.4.0-166.195-generic 4.4.194 Uname: Linux 4.4.0-166-generic x86_64 ApportVersion: 2.20.1-0ubuntu2.19 Architecture: amd64 Date: Sun Mar 8 21:53:43 2020 ProcEnviron: SHELL=/bin/bash TERM=xterm-256color PATH=(custom, no user) LANG=en_US.UTF-8 SourcePackage: rsyslog UpgradeStatus: No upgrade log present (probably fresh install) mtime.conffile..etc.rsyslog.conf: 2020-03-08T21:53:39.943611 ** Affects: rsyslog (Ubuntu) Importance: Undecided Status: New ** Tags: amd64 apport-bug third-party-packages uec-images xenial -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to rsyslog in Ubuntu. https://bugs.launchpad.net/bugs/1866573 Title: rsyslog does not contain pmciscoios module Status in rsyslog package in Ubuntu: New Bug description: rsyslog has a parser module for Cisco IOS formatted syslog messages: https://www.rsyslog.com/doc/master/configuration/modules/pmciscoios.html https://github.com/rsyslog/rsyslog/tree/master/plugins/pmciscoios It has been in rsyslog since early days (8.3.4); Bionic has 8.16.0. However, the Ubuntu Bionic package of rsyslog neither compiles pmciscoios into the binary, nor includes it as a loadable module. To replicate, try these lines in /etc/rsyslog.conf: module(load="pmciscoios") $RulesetParser rsyslog.ciscoios and restart rsyslog; you get these errors Mar 8 21:54:39 noc rsyslogd-2066: could not load module '/usr/lib/rsyslog/pmciscoios.so', dlopen: /usr/lib/rsyslog/pmciscoios.so: cannot open shared object file: No such file or directory [v8.16.0 try http://www.rsyslog.com/e/2066 ] Mar 8 21:54:39 noc rsyslogd-2159: error: parser 'rsyslog.ciscoios' unknown at this time (maybe defined too late in rsyslog.conf?) [v8.16.0 try http://www.rsyslog.com/e/2159 ] There is "pmcisconames.so", but that is something else: https://github.com/rsyslog/rsyslog/blob/master/contrib/pmcisconames/pmcisconames.c # dpkg-query -L rsyslog | grep pm.*so /usr/lib/rsyslog/pmaixforwardedfrom.so /usr/lib/rsyslog/pmlastmsg.so /usr/lib/rsyslog/pmsnare.so /usr/lib/rsyslog/pmcisconames.so There doesn't appear to be a separate package with the module: # apt-cache search rsyslog ... Upstream Debian bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929608 ProblemType: Bug DistroRelease: Ubuntu 16.04 Package: rsyslog 8.16.0-1ubuntu3.1 ProcVersionSignature: Ubuntu 4.4.0-166.195-generic 4.4.194 Uname: Linux 4.4.0-166-generic x86_64 ApportVersion: 2.20.1-0ubuntu2.19 Architecture: amd64 Date: Sun Mar 8 21:53:43 2020 ProcEnviron: SHELL=/bin/bash TERM=xterm-256color PATH=(custom, no user) LANG=en_US.UTF-8 SourcePackage: rsyslog UpgradeStatus: No upgrade log present (probably fresh install) mtime.conffile..etc.rsyslog.conf: 2020-03-08T21:53:39.943611 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/1866573/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
