Re: [rsyslog] 6.4.0 Anyone can make some light on the following issue?

Stefano Mason Tue, 28 Aug 2012 03:03:54 -0700

On 08/28/2012 10:26 AM, Stefano Mason wrote:

On 08/28/2012 10:47 AM, Rainer Gerhards wrote:
-----Original Message-----
From: [email protected] [mailto:rsyslog-
[email protected]] On Behalf Of Stefano Mason
Sent: Tuesday, August 28, 2012 10:16 AM
To: [email protected]
Subject: [rsyslog] 6.4.0 Anyone can make some light on the following issue?
rsyslogd 6.4.0

[it does NOT work]
How does "does NOT work" manifest? The construct parses well for me. Any error messages?
Those are the error messages:
Aug 23 12:54:59 goemon rsyslogd: [origin software="rsyslogd" swVersion="6.4.0" x-pid="19367" x-info="http://www.rsyslog.com";] start Aug 23 12:54:59 goemon rsyslogd: warning: selector line without actions will be discarded

In order to give you more INFO, I write the stripped output debug from command: /usr/local/sbin/rsyslogd -i /var/run/syslogd.pid -c 5 -d



7634.446262908:b78816c0: ------ start rule 0x9eb9b38:
7634.446275382:b78816c0: filter:script:
7634.446294099:b78816c0:     var '$fromhost-ip'
7634.446319243:b78816c0:   ==
7634.446336503:b78816c0:     string '127.0.0.1'
7634.446363280:b78816c0: AND
7634.446374079:b78816c0:     var '$syslogseverity-text'
7634.446408503:b78816c0:   ==
7634.446427164:b78816c0:     string 'emerg'
7634.446506258:b78816c0: aclst 0x9eb9b18: legacy action line: ':omusrmsg:*'
7634.446533778:b78816c0: ------ end rule 0x9eb9b38
7634.446559718:b78816c0: aclst 0x9eb9b18: legacy action line::omusrmsg:*
7634.446597712:b78816c0: tried selector action for builtin-file: -2001
7634.446612029:b78816c0: tried selector action for builtin-pipe: -2001
7634.446628938:b78816c0: tried selector action for builtin-shell: -2001
7634.446651440:b78816c0: tried selector action for builtin-discard: -2001
7634.446707850:b78816c0: tried selector action for builtin-fwd: -2001

7634.446727873:b78816c0: write-alltried selector action for builtin-usrmsg: -2186

7634.446750436:b78816c0: Module builtin-usrmsg processes this action.
7634.446771987:b78816c0: template: ' WallFmt' assigned
7634.446832215:b78816c0: action 10 queue: parameter dump:
7634.446845457:b78816c0: action 10 queue: queue.filename '[NONE]'
7634.446860919:b78816c0: action 10 queue: queue.size: 1000
7634.446876045:b78816c0: action 10 queue: queue.dequeuebatchsize: 16
7634.446892675:b78816c0: action 10 queue: queue.maxdiskspace: 1048576
7634.446907352:b78816c0: action 10 queue: queue.highwatermark: 800
7634.446922902:b78816c0: action 10 queue: queue.lowwatermark: 200
7634.446942793:b78816c0: action 10 queue: queue.fulldelaymark: -1
7634.446957623:b78816c0: action 10 queue: queue.lightdelaymark: -1
7634.446970908:b78816c0: action 10 queue: queue.discardmark: 9800
7634.446983610:b78816c0: action 10 queue: queue.discardseverity: 8
7634.446996603:b78816c0: action 10 queue: queue.checkpointinterval: 0
7634.447011658:b78816c0: action 10 queue: queue.syncqueuefiles: 0
7634.447026068:b78816c0: action 10 queue: queue.type: 3 [Direct]
7634.447042586:b78816c0: action 10 queue: queue.workerthreads: 1
7634.447062907:b78816c0: action 10 queue: queue.timeoutshutdown: 0

7634.447077551:b78816c0: action 10 queue: queue.timeoutactioncompletion: 1000

7634.447088811:b78816c0: action 10 queue: queue.timeoutenqueue: 2000

7634.447099851:b78816c0: action 10 queue: queue.timeoutworkerthreadshutdown: 60000 7634.447114637:b78816c0: action 10 queue: queue.workerthreadminimummessages: 100

7634.447130377:b78816c0: action 10 queue: queue.maxfilesize: 1048576
7634.447145667:b78816c0: action 10 queue: queue.saveonshutdown: 1
7634.447172528:b78816c0: action 10 queue: queue.dequeueslowdown: 0
7634.447187144:b78816c0: action 10 queue: queue.dequeuetimebegin: 0
7634.447201157:b78816c0: action 10 queue: queuedequeuetimend.: 25
7634.447213615:b78816c0: Action 0x9eb9e90: queue 0x9eba0a8 created

7634.447240225:b78816c0: Called LogError, msg: warning: selector line without actions will be discarded

7634.447539858:b78816c0: ZZZZ: pLocalHostIPIF used!

Thanks a lot.
Cheers.
Stefano


Bye
Stefano


Rainer

if \
                  $fromhost-ip == '127.0.0.1' \
          and \
                  $syslogseverity-text == 'emerg' \
then    :omusrmsg:*


[it works]
*.emerg action(type="omusrmsg"
Users="root"
)


[it does NOT work]
if \
                  $fromhost-ip == '127.0.0.1' \
          and \

$syslogseverity-text == 'emerg' \ then action(type="omusrmsg"

Users="root"
)

Maybe some parser issue?

Thanks for your answer.
Best regards.
Stefano

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards




_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards

smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards

Re: [rsyslog] 6.4.0 Anyone can make some light on the following issue?

Reply via email to