> Hi,
> I'm using stable. I'm trying to create some central log machine.
> I made some tests .. and it seems that when i start rsyslog on the
> central logging machine, it creates some messages regarding rsyslog
> version, for those messages FROMHOST is empty. 

That *is* a bug. FROMHOST should not be empty. And now that I know it'll
probably won't be empty in the future ;)

> If you want i can
> provide
> you with full rsyslog.conf. Please test and reply.

So you want to filter out the rsyslog startup and shutdown messages?
Please provide me a few samples of what the messages look in your log
files.

Thanks,
Rainer

> 
> Thanks,
> Radu Gheorghiu
> 
> Rainer Gerhards wrote:
> > Hi Radu,
> >
> > I will look into the issue, smells like a bug. But FROMHOST can
never
> be
> > empty... Is it just a sample? If so, which property you are looking
> it
> > (I wonder what may be empty, thus the question...).
> >
> > Rainer
> >
> >
> >> -----Original Message-----
> >> From: [EMAIL PROTECTED] [mailto:rsyslog-
> >> [EMAIL PROTECTED] On Behalf Of Radu Gheorghiu
> >> Sent: Saturday, March 22, 2008 6:47 AM
> >> To: [email protected]
> >> Subject: [rsyslog] Property-Based Filters
> >>
> >> Hi,
> >>
> >> I'm having trouble setting up some properties-based filters. I want
> to
> >> see if some property is equal to "" (empty).
> >> I'm doing this:
> >> :FROMHOST, isequal, ""
> >> *.info;mail.none;authpriv.none;cron.none                ?messages-
> per-
> >> host4
> >>
> >> But it still matches everything it should not. Am i doing something
> >> wrong?
> >>
> >> Thanks,
> >> Radu
> >> _______________________________________________
> >> rsyslog mailing list
> >> http://lists.adiscon.net/mailman/listinfo/rsyslog
> >>
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> >
> >
> 
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog

Reply via email to