Did you tried to put everything in the same configuration file ? (I never tried to include part of an action configuration - is it supported ?)
Reading your configuration I see: $InputFileTag fwd_test: [..] if ($programname == 'test' and not ($msg startswith '#')) then [..] Since InputFileTag and $programname doesn't match, are you sure your messages are forwarded by this action ? (You can use impstats to see which action counter is incremented) Philippe Muller On Wed, Oct 31, 2012 at 11:30 AM, C. L. Martinez <[email protected]>wrote: > Hi all, > > I am trying to configure a rsyslog instance to monitor some plain > text files and then forwards to a central rsyslog server. My actual > configuration is: > > # rsyslog v5 configuration file > > # For more information see /usr/share/doc/rsyslog-*/rsyslog_conf.html > # If you experience problems, see > http://www.rsyslog.com/doc/troubleshoot.html > > # Increasing Message size > $MaxMessageSize 64k > > #### MODULES #### > > #$ModLoad imuxsock # provides support for local system logging (e.g. > via logger command) > #$ModLoad imklog # provides kernel logging support (previously done by > rklogd) > #$ModLoad immark # provides --MARK-- message capability > $ModLoad imfile # provides access to files > > # Provides UDP syslog reception > #$ModLoad imudp > #$UDPServerRun 514 > > # Provides TCP syslog reception > #$ModLoad imtcp > #$InputTCPServerRun 514 > > > #### GLOBAL DIRECTIVES #### > > # Use default timestamp format > $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat > > # File syncing capability is disabled by default. This feature is > usually not required, > # not useful and an extreme performance hit > #$ActionFileEnableSync on > > # Define queues > $WorkDirectory /data/rsyslog > $InputFileName /data/test/logs/current/test1.log > $InputFileTag fwd_test: > $InputFileStateFile stat-fwd_test > $InputFileSeverity info > $InputRunFileMonitor > $InputFilePollingInterval 1 > $ActionQueueFileName fwdtest > $IncludeConfig /data/config/etc/rsyslog/queues-options.conf > if ($programname == 'test' and not ($msg startswith '#')) then > @@192.168.3.2:15514 > & ~ > > > queues-options.conf: > > $ActionQueueMaxDiskSpace 3g > $ActionQueueSaveOnShutdown on > $ActionQueueType LinkedList > $ActionResumeRetryCount -1 > > but it doesn't works no messages are queued (i have stopped rsyslog > central server). Somebody knows what am I doing wrong?? I have do it > serveral searches about this type of config, and nothing is different > compared with mine, except plain text files ... > > rsyslog is 5.8.10 ... > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
