No problem at all. The fix was rather trivial once I knew what I was looking for. Please let me know if it works for you. The original bug report - property based filters - however, was no bug, but a misunderstanding on how they work.
Rainer > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:rsyslog- > [EMAIL PROTECTED] On Behalf Of Radu Gheorghiu > Sent: Saturday, March 22, 2008 6:33 PM > To: rsyslog-users > Subject: Re: [rsyslog] Property-Based Filters > > Ok thanks :) I only wanted to know if you received it . But if you also > fixed it, it's even better :) > > Rainer Gerhards wrote: > > Replying as I can ;) I've not been able to go in-depth through the > file, > > but I ... doh ;) I guess it's all sitting in there. Lol - sorry. > > > > As an apology, here is the FROMHOST bugfix ;) > > > > > http://rsyslog.cvs.sourceforge.net/rsyslog/rsyslog/syslogd.c?r1=1.380.2 > . > > 21&r2=1.380.2.22&pathrev=Branch_Stable_2-0 > > > > Rainer > > > > > >> -----Original Message----- > >> From: [EMAIL PROTECTED] [mailto:rsyslog- > >> [EMAIL PROTECTED] On Behalf Of Radu Gheorghiu > >> Sent: Saturday, March 22, 2008 6:14 PM > >> To: rsyslog-users > >> Subject: Re: [rsyslog] Property-Based Filters > >> > >> Hmm i think i don't understand . Haven't you received the file that > i > >> sent you? Or did i miss something? > >> > >> Radu > >> > >> Rainer Gerhards wrote: > >> > >>> Well... Rsyslog tries all kind of things to get hold of the real > >>> > >> host. > >> > >>> So if you could send me a copy of the one causing problems, I may > >>> > >> (may > >> > >>> ;)) be able to do something against it. HOSTNAME should always > >>> > >> contain > >> > >>> something usable, but as you say ... it depends ;) > >>> > >>> Rainer > >>> > >>> > >>> > >>>> -----Original Message----- > >>>> From: [EMAIL PROTECTED] [mailto:rsyslog- > >>>> [EMAIL PROTECTED] On Behalf Of Radu Gheorghiu > >>>> Sent: Saturday, March 22, 2008 2:48 PM > >>>> To: rsyslog-users > >>>> Subject: Re: [rsyslog] Property-Based Filters > >>>> > >>>> I don't think that the HOSTNAME problem is a rsyslog problem. > >>>> I think that the remote host is not sending the HOSTNAME. > >>>> Remote host is using the classic syslog . > >>>> and it is configured like this: > >>>> *.* > >>>> > >>>> > >>> @central-logger > >>> > >>> > >>>> on the central logger .. i modify my template for debug: > >>>> $template MyTemplateName,"TheHost:d%HOSTNAME%d %syslogseverity% > >>>> > >>>> > >>> TheMsg: > >>> > >>> > >>>> %msg%\n" > >>>> > >>>> and in the logs: > >>>> TheHost:dlastd 5 TheMsg: repeated 8 times > >>>> > >>>> Seems like the message had no hostname field. and rsyslog thinks > >>>> "last" > >>>> is the hostname. > >>>> > >>>> Radu > >>>> > >>>> _______________________________________________ > >>>> rsyslog mailing list > >>>> http://lists.adiscon.net/mailman/listinfo/rsyslog > >>>> > >>>> > >>> _______________________________________________ > >>> rsyslog mailing list > >>> http://lists.adiscon.net/mailman/listinfo/rsyslog > >>> > >>> > >>> > >> _______________________________________________ > >> rsyslog mailing list > >> http://lists.adiscon.net/mailman/listinfo/rsyslog > >> > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog
