You can save time by ensuring that the config file is error-free
before you try out anything. As long as there is at least one error,
you never know what that error affects (well, you can know, but then
you need to be deep into the architecture). It's the same thing as
with compiler error messages...
Also, it would have been helpful if you had posted the requested info,
then we could have helped. But without that debug info, we really
don't know what goes on (I still don't know about what was the cause
of your original issue).
Rainer
Rainer
2016-12-01 14:57 GMT+01:00 mosto...@gmail.com <mosto...@gmail.com>:
> This worked, but I have lost 2 hours and still don't see where's the evil.
>
> Works:
>
> module(load="omrelp")
> ruleset(name="relp") {
> set $!data!group=field($programname,47,1);
> set $!data!msg=$msg;
> action(
> action.reportSuspension="on"
> action.resumeRetryCount="-1"
> port="20514"
> queue.maxdiskspace="5M"
> queue.SaveOnShutdown="on"
> queue.type="LinkedList"
> target="server"
> template="RSYSLOG_DebugFormat"
> type="omrelp"
> )
> }
>
> Doesn't work
>
> module(load="omrelp")
> ruleset(name="relp") {
> set $!data!foo="$programname"; <----------------just added
> this! (Line 17)
> set $!data!group=field($programname,47,1);
> set $!data!msg=$msg;
> action(
> action.reportSuspension="on"
> action.resumeRetryCount="-1"
> port="20514"
> queue.maxdiskspace="5M"
> queue.SaveOnShutdown="on"
> queue.type="LinkedList"
> target="server"
> template="RSYSLOG_DebugFormat"
> type="omrelp"
> )
> }
>
> Rsyslog complains with:
>
> rsyslogd: error during parsing file /etc/rsyslog.conf, on or before line 17:
> invalid character '"' in expression - is there an invalid escape sequence
> somewhere? [v8.23.0 try http://www.rsyslog.com/e/2207 ]
>
>
> El 01/12/16 a las 11:14, Rainer Gerhards escribió:
>
>> maybe the complete debug log would also help (not sure).
>> Rainer
>>
>> 2016-12-01 11:12 GMT+01:00 David Lang <da...@lang.hm>:
>>>
>>> no, we need to see the contents of programname (the RSYSLOG_DebugFormat
>>> will
>>> show this.
>>>
>>> David Lang
>>> k
>>>
>>> _______________________________________________
>>> rsyslog mailing list
>>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>> http://www.rsyslog.com/professional-services/
>>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
>>> of
>>> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
>>> LIKE THAT.
>>
>> _______________________________________________
>> rsyslog mailing list
>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>> http://www.rsyslog.com/professional-services/
>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
>> LIKE THAT.
>
>
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
> LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
