2015-03-11 20:53 GMT+01:00 David Lang <da...@lang.hm>: > I'm running rsyslog 8.8.0.ad1 and upgraded from liblognorm 1.1.0 to 1.1.1 > and discovered that parsing is not working > > If I run the parse manually with > grep ASA-6-302016 /var/log/cisco |head -1|/usr/lib/lognorm/lognormalizer > -r /root/rsyslog.rulebase -T > > it shows everything getting parsed properly > > but rsyslog is not extracting the fields that are shown with the manual > run. > > downgrading to 1.1.0 with no config changes restores the parsing. > > that probably has to do with the fact that we fixed the library versioning. I admit we did it wrongly so far, so I have little experience with the proper way and its implications. I guess, we need to rebuild the rsyslog packages. Will initiate that.
Thanks, Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.