Re: [rsyslog] rsyslogd writing to '/cron' file

I just noticed a stray "/cron" line in the Modules section.  I have no idea how that got there, but I assume that explains it. On 6/12/18 2:43 pm, Brendan Simon (eTRIX) wrote: > My `/etc/rsyslog.conf` is as follows: > > #  /etc/rsyslog.conf    Configuration file for rsyslog. > # > #  

Re: [rsyslog] rsyslogd writing to '/cron' file

My `/etc/rsyslog.conf` is as follows: #  /etc/rsyslog.conf    Configuration file for rsyslog. # #            For more information see # MODULES # $ModLoad imuxsock # provides support for local system logging /cron

[rsyslog] Question on the tls stalling issue

Any progress? We 'd like to switch to relp (compressed, encrypted) but I imagine I'll have the same issue, and I can't easily generate the traffic needed to test. We have a work around for the regular issue. Each syslog machine runs two rsyslog processes on a different port (non-TLS). A local

Re: [rsyslog] rsyslogd writing to '/cron' file

we would need to see your config to make any guesses. David Lang ___ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE

[rsyslog] rsyslogd writing to '/cron' file

I'm running Debian 10 (Buster) on some embedded systems (Xilinx Zynq SoC with SD card as filesystem). My root filesystem is formatted to 1GB and normally is about 66% full.  Something is going wrong where syslog entries are being written to `/var/log/syslog` and to a mystery file called `/cron`. 

Re: [rsyslog] mmnormalize - unable to load module

On Wed, 5 Dec 2018, Lavanya Kanchanapalli via rsyslog wrote: Hi Rich: My apps and rsyslog are running on Ubuntu (Xenial). Installing rsyslog-mmnormalize worked. In my searched on Internet I did not find any reference to rsyslog-mmnormalize and so tried independently installing liblognorm and

Re: [rsyslog] Problem with substring function

you may want to look at mmnormalize, it's considerably faster than regex and exec_template (but is more work to setup) David Lang On Wed, 5 Dec 2018, Neumann, Oliver wrote: Date: Wed, 5 Dec 2018 09:16:29 + From: "Neumann, Oliver" Reply-To: rsyslog-users To: rsyslog-users Subject: Re:

Re: [rsyslog] mmnormalize - unable to load module

Hi Rich: My apps and rsyslog are running on Ubuntu (Xenial). Installing rsyslog-mmnormalize worked. In my searched on Internet I did not find any reference to rsyslog-mmnormalize and so tried independently installing liblognorm and its dependencies which obviously did not work. One other

Re: [rsyslog] mmnormalize - unable to load module

On 12/5/18 10:11 AM, Lavanya Kanchanapalli via rsyslog wrote: Hi, I am trying to use rsyslog to parse and structure unstructured text application logs (tomcat logs). Based on the documentation and example rsyslog recipes

[rsyslog] mmnormalize - unable to load module

Hi, I am trying to use rsyslog to parse and structure unstructured text application logs (tomcat logs). Based on the documentation and example rsyslog recipes mmnormalize seems to very well suited for this purpose. Both with

Re: [rsyslog] rsyslog RELP and TLS - creating the certificates

I wonder if something has changed/broken with TLS for rsyslog as well. About a year ago I created a streamlined version of the rsyslog TLS certificate creation process for our internal use here. It worked for me as well as for others at our company. However, recently I needed to create some new

Re: [rsyslog] rsyslog RELP and TLS - creating the certificates

Hi Flo, I tried a few times from scratch and could not get it to work. The certtool output is different along with the defaults. From: Flo Rance [mailto:troura...@gmail.com] Sent: Wednesday, December 05, 2018 4:06 PM To: rsyslog-users Cc: LOEWENTHAL Sophie Subject: Re: [rsyslog] rsyslog RELP

Re: [rsyslog] rsyslog RELP and TLS - creating the certificates

Hi, What's wrong with this guide https://www.rsyslog.com/using-tls-with-relp/ ? The commands used in it still apply nowadays. Regards, Flo On Wed, Dec 5, 2018 at 12:52 PM sophie.loewenthal--- via rsyslog < rsyslog@lists.adiscon.com> wrote: > Hi, > > One and off for a few months I've been

Re: [rsyslog] Long line, can't understand forward truncation reason

We're running 8.38 currently, waiting for the next patch cycle for 8.39. Not seeing any kind of truncation messages. Scot Kreienkamp |Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive| Monroe, Michigan 48162 | Office: 734-384-6403 | | Mobile: 7349151444 | Email:

Re: [rsyslog] Long line, can't understand forward truncation reason

> > > Hi everyone, > > > > I have a program that is sending long lines into the logs they are > > arriving at the local server and into the logs correctly but are being > > truncated when being received on a remote server, and I can't understand > why. > > what is your maxmessagesize on the

Re: [rsyslog] Rsyslog Debian repository - outdated

> -Original Message- > Sent: Wednesday, December 05, 2018 1:50 PM > To: rsyslog-users > > Hi, > > The last version for the Debian repository was for Wheezy with rsyslog_8.27.0- > 1_amd64.deb Is there a Debian 9 repository with rsyslog 8.3.9? > >

[rsyslog] Rsyslog Debian repository - outdated

Hi, The last version for the Debian repository was for Wheezy with rsyslog_8.27.0-1_amd64.deb Is there a Debian 9 repository with rsyslog 8.3.9? https://www.rsyslog.com/debian-repository/ Best wishes, Sophie This message and any attachments (the "message") is intended solely for the

[rsyslog] rsyslog RELP and TLS - creating the certificates

Hi, One and off for a few months I've been trying toget TLS working with RELP. I've set up so many certificates for client and servers, and never managed to them to talk. Frankly, with all the hundreds of options in openssl/certtool and that the default values and order of questions that

Re: [rsyslog] v8.39 rsyslogd: omfwd: could not get addrinfo for hostname 'z2500':'10514': Name or service not known

Thanks John. Guess DNS was ill at that moment. It's working now > -Original Message- > From: rsyslog [mailto:rsyslog-boun...@lists.adiscon.com] On Behalf Of John > Chivian > Sent: Tuesday, December 04, 2018 3:49 PM > To: rsyslog@lists.adiscon.com > Subject: Re: [rsyslog] v8.39 rsyslogd:

Re: [rsyslog] Problem with substring function

Hi Peter, I tried to separate my code into 2 lines. That doesn’t help. Then I tried the following: set $.oc_user_name_wb=exec_template("oc_username"); set $.oc_user_name_tmp=replace($.oc_user_name_wb,"[",""); set $.oc_user_name=replace($.oc_user_name_tmp,"]","“); It's not pretty, but it