Well, you have to specify on which socket imuxsock will listen,
otherwise it cannot know where to listen. You are not creating any
socket by this, unless you explicitly configure otherwise. I would blame
the rsyslog documentation here for not mentioning this (if I am mistaken
please correct me) I will open a PR to fix it when I find time for it.
By default you probably want to listen on something like "/dev/log",
with this parameter the input should work, and you should be able to
specify ruleset for each imuxsock input.
Something like 'input(type="imuxsock" ruleset="local"
Socket="/dev/log")' should work for you.
On 07/11/2017 09:07 AM, deoren wrote:
Hi,
If I want to use a ruleset named "local" for an input that handles the
default local unix socket, how would I define the module and input
entries to reflect that?
I thought this would do it:
module(load="imuxsock")
input(type="imuxsock" ruleset="local")
but rsyslog complains like so:
> error during parsing file /etc/rsyslog.conf, on or before line 174:
parameter 'socket' required but not specified - fix config
> imuxsock: required parameter are missing [v8.27.0 try
http://www.rsyslog.com/e/2211
I've tried different variations, but I think I'm missing the obvious.
Looking around, I see that #765 added ruleset support for the imuxsock
module. The tests/testsuites/imuxsock_logger_ruleset.conf file from
the related commit[1] has this example conf block:
module(load="../plugins/imuxsock/.libs/imuxsock" sysSock.use="off")
input( type="imuxsock" socket="testbench_socket"
useSpecialParser="off"
ruleset="testruleset"
parseHostname="on")
I looked over the documentation[2] and I see 'Socket' underneath the
Input Parameters section. I see this description for that option:
> Socket <name-of-socket> adds additional unix socket, default none
I attempted to add that option to the input definition, but evidently
I have the syntax wrong. I'm really not trying to setup a new socket,
just tie a ruleset to the input.
Thanks for reading this.
[1]
https://github.com/rsyslog/rsyslog/commit/16db662d9fac0f9636eea873d690a629641be5bc#diff-dfb2a8c075f712e3d922afa06ee6ad93
[2]
http://www.rsyslog.com/doc/v8-stable/configuration/modules/imuxsock.html
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST
if you DON'T LIKE THAT.
--
Jiří Vymazal
Software Engineer
RedHat, Inc.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
