Awesome! Will look forward to the new release Thanks,
Alec On Fri, Jul 8, 2016 at 10:17 AM, Rainer Gerhards <[email protected]> wrote: > Fix is already available (See bug tracker) :-) > > I plan to release Monday (i hatte Friday releases...) > > Rainer > > Sent from phone, thus brief. > > Am 08.07.2016 16:46 schrieb "Alec Swan" <[email protected]>: > > > Rainer, in your comment here > > https://github.com/rsyslog/libfastjson/issues/107#issuecomment-231296954 > > you reproduced the invalid UTF-8 sequence "\u00-2\u00.9" which caused the > > "Unexpected character ('.' (code 46)): expected a hex-digit for character > > escape sequence" error thrown by Elasticsearch that started this email > > thread! > > I think fixing this issue is way more important than enforcing 8K size > > limit on imfile :) > > > > Thanks, > > > > Alec > > > > On Fri, Jul 8, 2016 at 12:15 AM, Rainer Gerhards < > [email protected] > > > > > wrote: > > > > > 2016-07-08 2:11 GMT+02:00 David Lang <[email protected]>: > > > > there is the global() section that you can use to set things > > > > > > > > global( > > > > maxMessageSize = "128k" > > > > action.reportSuspension = "on" > > > > action.reportSuspensionContinuation = "on" > > > > debug.logfile = "/var/log/rsyslog.debug" > > > > net.ipprotocol = "ipv4-only" > > > > net.enableDNS = "off" > > > > parser.escapeControlCharactersOnReceive = "on" > > > > ) > > > > > > > > I don't know how ES could be complaining about a 50K message if it's > > > > defaulting to 8K > > > > > > I think we had an issue that the size limit was not applied to > > > imfile-read messages. > > > > > > Also, I just came across this, which might be the root cause of the > > > json problem: > > > > > > https://github.com/rsyslog/libfastjson/issues/107 > > > > > > I'll try to look at it ASAP, but the code is not very easy to deal > > > with to phrase it politely ;) > > > > > > Rainer > > > > > > > > > > > > David Lang > > > > > > > > On Thu, 7 Jul 2016, Alec Swan wrote: > > > > > > > >> I remember seeing MaxMessageSize parameter, but I thought it was a > > > legacy > > > >> configuration per > > > >> > http://www.rsyslog.com/doc/v8-stable/configuration/global/index.html. > > > But > > > >> I > > > >> realize now that it's legacy format, not configuration. > > > >> > > > >> I didn't set this parameter and it's not in rsyslog.conf, so I per > the > > > >> same > > > >> document, the default is 8K. How could Elasticsearch then complain > > about > > > >> receiving a much larger message 50K which started this whole > > discussion? > > > >> > > > >> Thanks, > > > >> > > > >> Alec > > > >> > > > >> On Thu, Jul 7, 2016 at 3:46 PM, David Lang <[email protected]> wrote: > > > >> > > > >>> Per Rainer, the 10k limit is in the normalizer tool, not in the > > > library. > > > >>> In rsyslog there is a maxmessagesize parameter. That is the > limiting > > > >>> factor > > > >>> even with the existing version. > > > >>> > > > >>> the new version of liblognorm/mmnormalize will work with existing > > > version > > > >>> 1 rulesets. > > > >>> > > > >>> > > > >>> David Lang > > > >>> > > > >>> On Thu, 7 Jul 2016, Alec Swan wrote: > > > >>> > > > >>> So, does this mean that with the new rsyslog 8.20 and new > liblognorm > > > >>>> > > > >>>> version I will still be able to continue using "version 1" in my > > rules > > > >>>> and > > > >>>> not run into 10K limit? Or would I have to switch to version 2? > > > >>>> > > > >>>> Thanks, > > > >>>> > > > >>>> Alec > > > >>>> > > > >>>> On Thu, Jul 7, 2016 at 1:31 PM, David Lang <[email protected]> wrote: > > > >>>> > > > >>>> As I understand Rainer's reply, if you compile from the current > > > >>>> liblognorm > > > >>>>> > > > >>>>> master you will not have that limitation. This new branch will be > > > >>>>> released > > > >>>>> shortly (along with rsyslog 8.20) > > > >>>>> > > > >>>>> David Lang > > > >>>>> > > > >>>>> On Thu, 7 Jul 2016, Alec Swan wrote: > > > >>>>> > > > >>>>> Date: Thu, 7 Jul 2016 12:57:51 -0600 > > > >>>>> > > > >>>>>> > > > >>>>>> From: Alec Swan <[email protected]> > > > >>>>>> Reply-To: rsyslog-users <[email protected]> > > > >>>>>> To: rsyslog-users <[email protected]> > > > >>>>>> Subject: Re: [rsyslog] Invalid JSON from > > > >>>>>> mmnormalize/liblognorm/omelasticsearch > > > >>>>>> > > > >>>>>> The test I ran was using lognormalizer as shown below. So, I > > wasn't > > > >>>>>> using > > > >>>>>> it with the normalizer tool included in rsyslog distribution. > The > > > test > > > >>>>>> was > > > >>>>>> able to parse mylog.log under 10K and returned "2 unparsable > > > entries" > > > >>>>>> when > > > >>>>>> mylog.log was over 10K. Is there a way to increase this limit so > > > that > > > >>>>>> I > > > >>>>>> can > > > >>>>>> process messages larger than 10K with rsyslog 8.19.0? > > > >>>>>> > > > >>>>>> This is the test I ran: > > > >>>>>> lognormalizer -U -r myrule.rb < mylog.log > > > >>>>>> > > > >>>>>> This is the content of myrule.rb: > > > >>>>>> version=1 > > > >>>>>> rule=:%message:rest% > > > >>>>>> > > > >>>>>> This is the output from the test when mylog.log is over 10K: > > > >>>>>> { "originalmsg": "_THE_FIRST_10K_OF_TEXT_", "unparsed-data": > > > >>>>>> "_THE_FIRST_10K_OF_TEXT_"} > > > >>>>>> { "originalmsg": _REMAINING_TEXT_", "unparsed-data": > > > >>>>>> "_REMAINING_TEXT_" > > > >>>>>> } > > > >>>>>> 2 unparsable entries > > > >>>>>> > > > >>>>>> > > > >>>>>> Thanks, > > > >>>>>> > > > >>>>>> Alec > > > >>>>>> > > > >>>>>> On Thu, Jul 7, 2016 at 5:23 AM, Rainer Gerhards < > > > >>>>>> [email protected] > > > >>>>>> > > > > >>>>>> wrote: > > > >>>>>> > > > >>>>>> 2016-07-07 3:54 GMT+02:00 David Lang <[email protected]>: > > > >>>>>> > > > >>>>>>> > first I've heard of this, we'll need to have Rainer comment > on > > > >>>>>>> > this. > > > >>>>>>> > > > >>>>>>> there is no such 10k limit in liblognorm. HOWEVER, the > normalizer > > > >>>>>>> tool > > > >>>>>>> that comes with it had such a limit until current master > branch. > > > >>>>>>> > > > >>>>>>> If used with rsyslog, I would assume that the max message size > is > > > set > > > >>>>>>> to > > > >>>>>>> 10k. > > > >>>>>>> > > > >>>>>>> HTH > > > >>>>>>> Rainer > > > >>>>>>> > > > > >>>>>>> > David Lang > > > >>>>>>> > > > > >>>>>>> > On Wed, 6 Jul 2016, Alec Swan wrote: > > > >>>>>>> > > > > >>>>>>> >> Date: Wed, 6 Jul 2016 15:34:44 -0600 > > > >>>>>>> >> From: Alec Swan <[email protected]> > > > >>>>>>> >> Reply-To: rsyslog-users <[email protected]> > > > >>>>>>> >> To: rsyslog-users <[email protected]> > > > >>>>>>> >> > > > >>>>>>> >> Subject: Re: [rsyslog] Invalid JSON from > > > >>>>>>> >> mmnormalize/liblognorm/omelasticsearch > > > >>>>>>> >> > > > >>>>>>> >> Dave, I tried using liblognorm to parse the log message and > it > > > >>>>>>> >> looks > > > >>>>>>> like > > > >>>>>>> >> %rest% liblognorm type can only match up to 10240 > characters. > > > So, > > > >>>>>>> for > > > >>>>>>> >> example the following rule succeeds parsing 10239 character > > > >>>>>>> >> message, > > > >>>>>>> but > > > >>>>>>> >> fails with 10240. > > > >>>>>>> >> > > > >>>>>>> >> rule=:%message:rest% > > > >>>>>>> >> > > > >>>>>>> >> The particular log file I am parsing contains enormous log > > > >>>>>>> >> messages, > > > >>>>>>> e.g. > > > >>>>>>> >> 180,000 characters in a single line. So, is there really a > > limit > > > >>>>>>> >> on > > > >>>>>>> 10240 > > > >>>>>>> >> characters in liblognorm? If so, what's the recommended way > to > > > >>>>>>> handle > > > >>>>>>> >> parsing of extremely large messages? > > > >>>>>>> >> > > > >>>>>>> >> Thanks, > > > >>>>>>> >> > > > >>>>>>> >> Alec > > > >>>>>>> >> > > > >>>>>>> >> On Wed, Jun 29, 2016 at 6:09 PM, David Lang <[email protected]> > > > wrote: > > > >>>>>>> >> > > > >>>>>>> >>> This is helping narrow things down. > > > >>>>>>> >>> > > > >>>>>>> >>> I would have rsyslog write to a file with the template that > > you > > > >>>>>>> >>> use > > > >>>>>>> to > > > >>>>>>> >>> send to elasticsearch. > > > >>>>>>> >>> > > > >>>>>>> >>> I would also use the liblognorm command-line tool to parse > > the > > > >>>>>>> >>> file > > > >>>>>>> and > > > >>>>>>> >>> output json. > > > >>>>>>> >>> > > > >>>>>>> >>> let's try to see where it breaks. > > > >>>>>>> >>> > > > >>>>>>> >>> David Lang > > > >>>>>>> >>> > > > >>>>>>> >>> On Wed, 29 Jun 2016, Alec Swan wrote: > > > >>>>>>> >>> > > > >>>>>>> >>> David, as you suggested, I extracted the log lines > containing > > > >>>>>>> >>> Hindi > > > >>>>>>> >>>> > > > >>>>>>> >>>> characters in a separate file and ran "file -bi" which > > > returned > > > >>>>>>> >>>> "text/plain; charset=utf-8". Which confirms that logs are > > > >>>>>>> >>>> written > > > >>>>>>> in > > > >>>>>>> >>>> UTF-8. > > > >>>>>>> >>>> Any thoughts what would cause rsyslog to send messages > like > > > >>>>>>> >>>> "\u00E0\u00.4??? > > > >>>>>>> >>>> > > > >>>>>>> >>>> Description in Hindi" causing Elasticsearch to throw an > > > >>>>>>> >>>> exception? > > > >>>>>>> >>>> > > > >>>>>>> >>>> Thanks, > > > >>>>>>> >>>> > > > >>>>>>> >>>> Alec > > > >>>>>>> >>>> > > > >>>>>>> >>>> On Wed, Jun 29, 2016 at 4:08 PM, alecswan < > > [email protected] > > > > > > > >>>>>>> wrote: > > > >>>>>>> >>>> > > > >>>>>>> >>>> I looked at the code that produces this log file and it's > > > >>>>>>> >>>> writing > > > >>>>>>> the > > > >>>>>>> >>>> log > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> with utf-8 encoding. What else could cause this problem? > > > Could > > > >>>>>>> >>>>> it > > > >>>>>>> be > > > >>>>>>> >>>>> that > > > >>>>>>> >>>>> Hindi characters may require 3 bytes for encoding? Just > > > >>>>>>> >>>>> grasping > > > >>>>>>> at > > > >>>>>>> >>>>> straws > > > >>>>>>> >>>>> here ... > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> Thanks, > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> Alec > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> -------- Original message -------- > > > >>>>>>> >>>>> From: David Lang > > > >>>>>>> >>>>> Date:29/06/2016 2:00 PM (GMT-07:00) > > > >>>>>>> >>>>> To: rsyslog-users > > > >>>>>>> >>>>> Subject: Re: [rsyslog] Invalid JSON from > > > >>>>>>> >>>>> mmnormalize/liblognorm/omelasticsearch > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> On Wed, 29 Jun 2016, Alec Swan wrote: > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> > I tried using mmutf8fix as shown below, but it didn't > > seem > > > to > > > >>>>>>> fix > > > >>>>>>> the > > > >>>>>>> >>>>> > problem. What I am doing is monitoring a log file with > > > imfile > > > >>>>>>> action, > > > >>>>>>> >>>>> > parsing it with mmnormalize and sending JSON to > > > Elasticsearch > > > >>>>>>> with > > > >>>>>>> >>>>> > omelasticsearch. > > > >>>>>>> >>>>> > > > > >>>>>>> >>>>> > I check the encoding of the log file using "file -bi" > and > > > it > > > >>>>>>> says > > > >>>>>>> >>>>> > "text/plain; charset=us-ascii". > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> > However, it contains some Hindi characters, which I > > assume > > > >>>>>>> >>>>> > are > > > >>>>>>> >>>>> > encoded > > > >>>>>>> >>>>> with > > > >>>>>>> >>>>> > us-ascii. > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> There is no way to encode Hindi characters as us-ascii. > > > >>>>>>> >>>>> us-ascii > > > >>>>>>> is > > > >>>>>>> the > > > >>>>>>> >>>>> most > > > >>>>>>> >>>>> basic character set, English uppper case, lower case and > > > >>>>>>> punctuation > > > >>>>>>> >>>>> only. > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> So whatever character set it is in, it's not us-ascii > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> > If I understand correctly, > > > >>>>>>> >>>>> > us-ascii is a subset of UTF-8. If this is the case, do > I > > > >>>>>>> >>>>> > really > > > >>>>>>> need > > > >>>>>>> >>>>> > to > > > >>>>>>> >>>>> us > > > >>>>>>> >>>>> > mmutf8fix? > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> It all depends on what character set it's actually in. > try > > > >>>>>>> making a > > > >>>>>>> >>>>> copy > > > >>>>>>> >>>>> of the > > > >>>>>>> >>>>> file that has the Hindi characters near the beginning of > it > > > and > > > >>>>>>> try > > > >>>>>>> the > > > >>>>>>> >>>>> file -bi > > > >>>>>>> >>>>> again, see if it gives a more accurate answer. > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> otherwise, you will have to track down what's writing the > > > >>>>>>> messages > > > >>>>>>> and > > > >>>>>>> >>>>> try > > > >>>>>>> >>>>> to > > > >>>>>>> >>>>> set the character set there (or at least find out what > > > >>>>>>> >>>>> character > > > >>>>>>> set > > > >>>>>>> >>>>> it's > > > >>>>>>> >>>>> using) > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> David Lang > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> > To me it seems like the Hindi characters are UTF-8 > > encoded > > > >>>>>>> >>>>> > with > > > >>>>>>> >>>>> > 3-byte > > > >>>>>>> >>>>> > sequences and when they are received by Elasticsearch > the > > > >>>>>>> >>>>> > byte > > > >>>>>>> >>>>> > sequence > > > >>>>>>> >>>>> is > > > >>>>>>> >>>>> > incorrectly decoded to invalid Unicode sequence, such > as > > > >>>>>>> "\u00.4". > > > >>>>>>> Is > > > >>>>>>> >>>>> this > > > >>>>>>> >>>>> > plausible? > > > >>>>>>> >>>>> > > > > >>>>>>> >>>>> > module(load = "imfile") > > > >>>>>>> >>>>> > module(load="mmutf8fix") > > > >>>>>>> >>>>> > module(load = "mmnormalize") > > > >>>>>>> >>>>> > module(load = "omelasticsearch") > > > >>>>>>> >>>>> > > > > >>>>>>> >>>>> > input(type = "imfile" Ruleset="X" ...) > > > >>>>>>> >>>>> > ruleset(name = "X") { > > > >>>>>>> >>>>> > action(type="mmutf8fix") > > > >>>>>>> >>>>> > action(type = "mmnormalize" ...) > > > >>>>>>> >>>>> > action(type = "omelasticsearch" ...) > > > >>>>>>> >>>>> > } > > > >>>>>>> >>>>> > > > > >>>>>>> >>>>> > Thanks, > > > >>>>>>> >>>>> > > > > >>>>>>> >>>>> > Alec > > > >>>>>>> >>>>> > > > > >>>>>>> >>>>> > On Tue, Jun 28, 2016 at 4:49 PM, Alec Swan > > > >>>>>>> >>>>> > <[email protected] > > > >>>>>>> > > > > >>>>>>> >>>>> > wrote: > > > >>>>>>> >>>>> > > > > >>>>>>> >>>>> >> Thanks for the suggestion, Dave. I noticed that on > the > > > >>>>>>> >>>>> >> client > > > >>>>>>> side > > > >>>>>>> >>>>> the > > > >>>>>>> >>>>> >> log contained Hindi characters that got translated to > > > >>>>>>> >>>>> "\u00E0\u00.4???\" > > > >>>>>>> >>>>> >> which eventually caused the error. I'll give mmutf8fix > > > >>>>>>> >>>>> >> plugin > > > >>>>>>> a > > > >>>>>>> try. > > > >>>>>>> >>>>> >> > > > >>>>>>> >>>>> >> Thanks, > > > >>>>>>> >>>>> >> > > > >>>>>>> >>>>> >> Alec > > > >>>>>>> >>>>> >> > > > >>>>>>> >>>>> >> On Tue, Jun 28, 2016 at 3:24 PM, Dave Caplinger < > > > >>>>>>> >>>>> >> [email protected]> wrote: > > > >>>>>>> >>>>> >> > > > >>>>>>> >>>>> >>> On Jun 28, 2016, at 4:04 PM, Alec Swan < > > > [email protected]> > > > >>>>>>> wrote: > > > >>>>>>> >>>>> >>> > > > > >>>>>>> >>>>> >>> > I think the root cause of the problem is that there > > is > > > an > > > >>>>>>> invalid > > > >>>>>>> >>>>> UTF-8 > > > >>>>>>> >>>>> >>> > sequence "\u00.4" in the value if the "message" > > field. > > > In > > > >>>>>>> fact, I > > > >>>>>>> >>>>> just > > > >>>>>>> >>>>> >>> > confirmed that {"message":"\u00.4"} is not a valid > > JSON > > > >>>>>>> >>>>> >>> > on > > > >>>>>>> >>>>> >>> > http://jsonlint.com/. > > > >>>>>>> >>>>> >>> > > > >>>>>>> >>>>> >>> I've run into something similar where the original > > > message > > > >>>>>>> source > > > >>>>>>> >>>>> >>> was > > > >>>>>>> >>>>> >>> sending Windows-1252 or other character set. Rsyslog > > > >>>>>>> >>>>> >>> doesn't > > > >>>>>>> know > > > >>>>>>> >>>>> the > > > >>>>>>> >>>>> >>> incoming character set, so it doesn't know that it > > needs > > > to > > > >>>>>>> be > > > >>>>>>> >>>>> converted to > > > >>>>>>> >>>>> >>> UTF-8. (That particular input would receive logs from > > > >>>>>>> >>>>> >>> various > > > >>>>>>> >>>>> sources, > > > >>>>>>> >>>>> so > > > >>>>>>> >>>>> >>> the character set could vary per message). > > > >>>>>>> >>>>> >>> > > > >>>>>>> >>>>> >>> The fix we used was to add action(type="mmutf8fix") > to > > > the > > > >>>>>>> affected > > > >>>>>>> >>>>> >>> ruleset prior to any JSON template use. This isn't > > > >>>>>>> >>>>> >>> strictly > > > >>>>>>> >>>>> >>> accurate > > > >>>>>>> >>>>> >>> because you lose the 'invalid' character in the > > resulting > > > >>>>>>> string, > > > >>>>>>> >>>>> >>> but > > > >>>>>>> >>>>> at > > > >>>>>>> >>>>> >>> least that string is JSON-safe. In the ideal case > > you'd > > > >>>>>>> >>>>> >>> know > > > >>>>>>> what > > > >>>>>>> >>>>> the > > > >>>>>>> >>>>> >>> original character set was and explicitly convert it > > > UTF-8, > > > >>>>>>> but > > > >>>>>>> >>>>> >>> that > > > >>>>>>> >>>>> wasn't > > > >>>>>>> >>>>> >>> practical in our use case. > > > >>>>>>> >>>>> >>> > > > >>>>>>> >>>>> >>> -- > > > >>>>>>> >>>>> >>> Dave Caplinger | Director, Technical Product > Management > > > >>>>>>> >>>>> >>> Solutionary — An NTT Group Security Company > > > >>>>>>> >>>>> >>> > > > >>>>>>> >>>>> >>> _______________________________________________ > > > >>>>>>> >>>>> >>> rsyslog mailing list > > > >>>>>>> >>>>> >>> http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >>>>>>> >>>>> >>> http://www.rsyslog.com/professional-services/ > > > >>>>>>> >>>>> >>> What's up with rsyslog? Follow > > > >>>>>>> >>>>> >>> https://twitter.com/rgerhards > > > >>>>>>> >>>>> >>> NOTE WELL: This is a PUBLIC mailing list, posts are > > > >>>>>>> >>>>> >>> ARCHIVED > > > >>>>>>> by a > > > >>>>>>> >>>>> myriad > > > >>>>>>> >>>>> >>> of sites beyond our control. PLEASE UNSUBSCRIBE and > DO > > > NOT > > > >>>>>>> POST > > > >>>>>>> if > > > >>>>>>> >>>>> you > > > >>>>>>> >>>>> >>> DON'T LIKE THAT. > > > >>>>>>> >>>>> >>> > > > >>>>>>> >>>>> >> > > > >>>>>>> >>>>> >> > > > >>>>>>> >>>>> > _______________________________________________ > > > >>>>>>> >>>>> > rsyslog mailing list > > > >>>>>>> >>>>> > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >>>>>>> >>>>> > http://www.rsyslog.com/professional-services/ > > > >>>>>>> >>>>> > What's up with rsyslog? Follow > > > https://twitter.com/rgerhards > > > >>>>>>> >>>>> > NOTE WELL: This is a PUBLIC mailing list, posts are > > > ARCHIVED > > > >>>>>>> by a > > > >>>>>>> >>>>> myriad > > > >>>>>>> >>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO > NOT > > > POST > > > >>>>>>> if > > > >>>>>>> you > > > >>>>>>> >>>>> DON'T LIKE THAT. > > > >>>>>>> >>>>> _______________________________________________ > > > >>>>>>> >>>>> rsyslog mailing list > > > >>>>>>> >>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >>>>>>> >>>>> http://www.rsyslog.com/professional-services/ > > > >>>>>>> >>>>> What's up with rsyslog? Follow > > https://twitter.com/rgerhards > > > >>>>>>> >>>>> NOTE WELL: This is a PUBLIC mailing list, posts are > > ARCHIVED > > > by > > > >>>>>>> >>>>> a > > > >>>>>>> >>>>> myriad > > > >>>>>>> >>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO > NOT > > > POST > > > >>>>>>> if > > > >>>>>>> you > > > >>>>>>> >>>>> DON'T LIKE THAT. > > > >>>>>>> >>>>> > > > >>>>>>> >>>>> _______________________________________________ > > > >>>>>>> >>>> > > > >>>>>>> >>>> rsyslog mailing list > > > >>>>>>> >>>> http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >>>>>>> >>>> http://www.rsyslog.com/professional-services/ > > > >>>>>>> >>>> What's up with rsyslog? Follow > > https://twitter.com/rgerhards > > > >>>>>>> >>>> NOTE WELL: This is a PUBLIC mailing list, posts are > ARCHIVED > > > by > > > >>>>>>> >>>> a > > > >>>>>>> myriad > > > >>>>>>> >>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT > > > POST > > > >>>>>>> >>>> if > > > >>>>>>> you > > > >>>>>>> >>>> DON'T LIKE THAT. > > > >>>>>>> >>>> > > > >>>>>>> >>> > > > >>>>>>> >>> _______________________________________________ > > > >>>>>>> >>> rsyslog mailing list > > > >>>>>>> >>> http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >>>>>>> >>> http://www.rsyslog.com/professional-services/ > > > >>>>>>> >>> What's up with rsyslog? Follow > https://twitter.com/rgerhards > > > >>>>>>> >>> NOTE WELL: This is a PUBLIC mailing list, posts are > ARCHIVED > > > by a > > > >>>>>>> myriad > > > >>>>>>> >>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT > > POST > > > >>>>>>> >>> if > > > >>>>>>> you > > > >>>>>>> >>> DON'T LIKE THAT. > > > >>>>>>> >>> > > > >>>>>>> >> _______________________________________________ > > > >>>>>>> >> rsyslog mailing list > > > >>>>>>> >> http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >>>>>>> >> http://www.rsyslog.com/professional-services/ > > > >>>>>>> >> What's up with rsyslog? Follow > https://twitter.com/rgerhards > > > >>>>>>> >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED > > by > > > a > > > >>>>>>> myriad > > > >>>>>>> >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT > > POST > > > if > > > >>>>>>> you > > > >>>>>>> DON'T > > > >>>>>>> >> LIKE THAT. > > > >>>>>>> > > > > >>>>>>> > > > > >>>>>>> > _______________________________________________ > > > >>>>>>> > rsyslog mailing list > > > >>>>>>> > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >>>>>>> > http://www.rsyslog.com/professional-services/ > > > >>>>>>> > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > >>>>>>> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED > > by a > > > >>>>>>> myriad > > > >>>>>>> of > > > >>>>>>> > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST > if > > > you > > > >>>>>>> DON'T > > > >>>>>>> > LIKE THAT. > > > >>>>>>> _______________________________________________ > > > >>>>>>> rsyslog mailing list > > > >>>>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >>>>>>> http://www.rsyslog.com/professional-services/ > > > >>>>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards > > > >>>>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED > by a > > > >>>>>>> myriad > > > >>>>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST > > if > > > >>>>>>> you > > > >>>>>>> DON'T LIKE THAT. > > > >>>>>>> > > > >>>>>>> _______________________________________________ > > > >>>>>>> > > > >>>>>> rsyslog mailing list > > > >>>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >>>>>> http://www.rsyslog.com/professional-services/ > > > >>>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards > > > >>>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by > a > > > >>>>>> myriad > > > >>>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST > if > > > you > > > >>>>>> DON'T LIKE THAT. > > > >>>>>> > > > >>>>>> > > > >>>>> _______________________________________________ > > > >>>>> rsyslog mailing list > > > >>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >>>>> http://www.rsyslog.com/professional-services/ > > > >>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards > > > >>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > > >>>>> myriad > > > >>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST > if > > > you > > > >>>>> DON'T LIKE THAT. > > > >>>>> > > > >>>>> _______________________________________________ > > > >>>> > > > >>>> rsyslog mailing list > > > >>>> http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >>>> http://www.rsyslog.com/professional-services/ > > > >>>> What's up with rsyslog? Follow https://twitter.com/rgerhards > > > >>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > > myriad > > > >>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > > you > > > >>>> DON'T LIKE THAT. > > > >>> > > > >>> > > > >>> > > > >>> _______________________________________________ > > > >>> rsyslog mailing list > > > >>> http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >>> http://www.rsyslog.com/professional-services/ > > > >>> What's up with rsyslog? Follow https://twitter.com/rgerhards > > > >>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > > myriad > > > >>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > > you > > > >>> DON'T LIKE THAT. > > > >>> > > > >> _______________________________________________ > > > >> rsyslog mailing list > > > >> http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >> http://www.rsyslog.com/professional-services/ > > > >> What's up with rsyslog? Follow https://twitter.com/rgerhards > > > >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > myriad > > > >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > you > > > DON'T > > > >> LIKE THAT. > > > > > > > > > > > > _______________________________________________ > > > > rsyslog mailing list > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > http://www.rsyslog.com/professional-services/ > > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > myriad > > > of > > > > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > DON'T > > > > LIKE THAT. > > > _______________________________________________ > > > rsyslog mailing list > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad > > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > > DON'T LIKE THAT. > > > > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > DON'T LIKE THAT. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

