2015-03-11 20:53 GMT+01:00 David Lang <da...@lang.hm>:

> I'm running rsyslog 8.8.0.ad1 and upgraded from liblognorm 1.1.0 to 1.1.1
> and discovered that parsing is not working
>
> If I run the parse manually with
> grep ASA-6-302016 /var/log/cisco |head -1|/usr/lib/lognorm/lognormalizer
> -r /root/rsyslog.rulebase -T
>
> it shows everything getting parsed properly
>
> but rsyslog is not extracting the fields that are shown with the manual
> run.
>
> downgrading to 1.1.0 with no config changes restores the parsing.
>
>
that probably has to do with the fact that we fixed the library versioning.
I admit we did it wrongly so far, so I have little experience with the
proper way and its implications. I guess, we need to rebuild the rsyslog
packages. Will initiate that.

Thanks,
Rainer
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to