I forgot to mention: also attach your rsyslog configuration please. On Thu, Jun 16, 2022, 19:55 Joan Sala <jsiwrk+rsys...@gmail.com> wrote:
> The warning message simply indicates that rsyslog has detected that the > program (.rsysevent32790.sh) has exited. > > The way omprog is intended to be used is as follows: it launches the > program attaching a pipe to its stdin, the program should continuously read > lines (logs) from the pipe, until the pipe gets closed by rsyslog (eof > reading from it). If the program exits before that, rsyslog will report > that warning message and try to restart the program. > > I don't understand how you are trying to use omprog. Attaching the > contents of your script could help us better understand your use case. > > Regards > > Joan Sala > > > On Mon, Jun 13, 2022, 09:20 d.jagodic via rsyslog < > rsyslog@lists.adiscon.com> wrote: > >> Hi, >> >> In the embeded system we use rsyslog 8.2010.(but the same si in 8.2204) >> >> Is it possible to prevent the cause of the following warnings? >> >> rsyslogd: omprog: program '/tmp/.rsysevent32790.sh' (pid 29661) >> terminated; will be restarted [v8.2204.1 try >> https://www.rsyslog.com/e/2119 ] >> rsyslogd: action 'action-34-omprog' suspended (module 'omprog'), retry >> 0. There should be messages before this one giving the reason for >> suspension. [v8.2204.1 try https://www.rsyslog.com/e/2007 ] >> rsyslogd: action 'action-34-omprog' resumed (module 'omprog') [v8.2204.1 >> try https://www.rsyslog.com/e/2359 ] >> >> >> In parallel with the execution of the script, snmp-trap is sent, >> >> currently we have a situation where the script is executed once, but the >> snmp-trap is sent twice with an interval of about 1 second. >> >> >> Kind regards >> >> Drasko >> _______________________________________________ >> rsyslog mailing list >> https://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. > > _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.