Hi all, I'm using RSyslog to collect all my netconsole outputs from different servers and like to ask if some of you has a suggestion for the following problem:
Ordinary kernel messages are handled correctly, yet e.g. a kernel panic
seams to be split in several printk() calls. Therefore it is very hard
to attach a timestamp to each log entry. In the end you have something
like this:
2013-10-30 12:00:06 PGD 4a871067 2013-10-30 12:00:06 PUD 4a282067 \
2013-10-30 12:00:06 PMD 0 2013-10-30 12:00:06
2013-10-30 12:00:06 Oops: 0002 [1] 2013-10-30 12:00:06 SMP 2013-10-30 \
12:00:06
2013-10-30 12:00:06 last sysfs file: \
/devices/pci0000:00/0000:00:00.0/irq
2013-10-30 12:00:06 CPU 0 2013-10-30 12:00:06
2013-10-30 12:00:06 Modules linked in:2013-10-30 12:00:06 panic(U) \
... (every module with a timestamp)
(\ as line-not-ending-character)
Is there anything in RSyslog which buffers a message until a line feed
is received? As far as I observed it, every printk() instruction is
handled as a message.
My current workaround is to enable the kernel print time output on
RHEL (where it is not enabled by default) and print once in a while the
output of `date` through /dev/kmsg and store everything as-is in a
separate logfile per host. (I also implemented logging in pgSQL, which
suffers the same problem.)
My logging system runs Debian Wheezy with stock RSyslog 5.8.11 and my
(working without timestamp) netconsole specific configuration looks like this:
$EscapeControlCharactersOnReceive off
$DropTrailingLFOnReception off
$RuleSet NetconsoleFileRuleset
$template NetconsoleFile,"/var/log/netconsole-%FROMHOST%.log"
$template NetconsoleFileFormat,"%rawmsg%"
*.* ?NetconsoleFile;NetconsoleFileFormat
$RuleSet RSYSLOG_DefaultRuleset
$ModLoad imudp
$InputUDPServerBindRuleset NetconsoleFileRuleset
$UDPServerRun 6666
Any ideas to tackle my problem?
Best regards,
Andreas Steinel
M.Sc. mult.
IT Project Coordinator (IHK)
=================================================
eXirius IT Dienstleistungen GmbH
Hochstr. 59
66115 Saarbrücken, Germany
Tel.: +49 681 76157 0
Fax: +49 681 76157 77
E-Mail: [email protected]
WWW: http://www.exirius.de/
Geschäftsführer: Dipl.-Math. oec. Michael Royar
Amtsgericht Saarbrücken HR B - 12124
UST-IdNr. DE 813085837
Steuernummer 040 108 016 19
signature.asc
Description: Digital signature
_______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
