On 7/11/17 3:36 AM, Jiří Vymazal via rsyslog wrote:
Well, you have to specify on which socket imuxsock will listen,
otherwise it cannot know where to listen. You are not creating any
socket by this, unless you explicitly configure otherwise.
I guess I incorrectly assumed that these two entries would setup a
default socket since I didn't specify one:
module(load="imuxsock")
input(type="imuxsock" ruleset="local")
It only seems to be an issue when I specify the ruleset option. If I
leave the entry just as 'input(type="imuxsock")' rsyslog seems to be
happy to apply default settings.
I would blame
the rsyslog documentation here for not mentioning this (if I am mistaken
please correct me) I will open a PR to fix it when I find time for it.
Awesome, thank you.
By default you probably want to listen on something like "/dev/log",
with this parameter the input should work, and you should be able to
specify ruleset for each imuxsock input.
Something like 'input(type="imuxsock" ruleset="local"
Socket="/dev/log")' should work for you.
Thanks. Pretending that I am not attempting to apply a ruleset, are
these two lines equivalent:
input(type="imuxsock" Socket="/dev/log" ruleset="local")
input(type="imuxsock")
In other words, will explicitly specifying /dev/log leave out some other
messages that would ordinarily be picked up by not specifying a socket
and allowing rsyslog to automatically apply those settings?
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
