Re: [rsyslog] Ruleset Queues in v7

2012-11-30 Thread Rainer Gerhards
  You can put queue.type=linkedlist within the action. That would
 make
  an
  action queue that would be specific for that action.
 
  If you want to define a different incoming queue per ruleset... I
 don't
  know how to do that. At least not from the top of my head. But I can
  try to
  find out if you need that and nobody else comes up with a suggestion.
 
 I put it on my todo list. It may be that I overlooked that case.
 Usually not a problem, but I modeled (by intention) the ruleset()
 construct so that the legacy ruleset directives can not be  used to
 modify the new-style object. Will try to find an answer (and solution,
 if necessary) within the next few days. Ping me if I do not come back!

I have now at least checked the code in question. I actually overlooked that 
problem. The current versions do not support ruleset queues in new-style 
config. I hope to be able to look at a cure today.

Rainer
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] Please help with Snare Format

2012-11-30 Thread jdguingao
David thank you for your help I already solve the problem.


This message is part of the syslog tag: MSWinEventLog0  
Security957 Fri 

So i just use this command to extract the security field. syslogtag:F:3.
Again thank your for all your help


Cheers
Jong



--
View this message in context: 
http://rsyslog-rsyslog-users.1305293.n2.nabble.com/Please-help-with-Snare-Format-tp7579234p7579247.html
Sent from the rsyslog -- rsyslog-users mailing list archive at Nabble.com.
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


[rsyslog] [empty syslog] after powerfail

2012-11-30 Thread Keller, Eric
Hi everybody,

I did seek for an answer on your mailing list archive, but did not get a 
concrete answer concerning the problem I am witnessing with rsyslog and power 
failure.
Here are more info:

rsyslog version: 5.8.5

it happens sporadically that our syslog log file does contain only few system 
logs like kernel logs but not any of our logs!
We isolated the problem down and could only reproduce the problem by producing 
a hard shutdown (hitting the power button)

When starting up, we noticed that the rsyslogd is running despite no  lock was 
created in the /tmp/.rsyslog-lock Another consequence is that our 
/home/roche/share/log/syslog does not log any of our project traces.
Killing rsyslogd and starting it again will start to log our project entries 
into the syslog!

Does someone out there encountered the same problems? Do someone have an idea 
why this happens?
Does someone sees a misconfiguration ? Or should I start the rsyslogd in 
another way?


here are the configuration files: note: there are no additional configuration 
files in the /home/roche/etc/rsyslog.d/ 

 
rsyslog.conf---
# Begin /etc/rsyslog.conf

$ModLoad immark # provides --MARK-- message capability $ModLoad imuxsock # 
provides support for local system logging (e.g. via logger command) $ModLoad 
imklog # provides kernel logging support (previously done by rklogd)

daemon.* -/var/log/daemon.log
kern.* -/var/log/kern.log
user.* -/var/log/user.log

# Use traditional timestamp format.
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat

$EscapeControlCharactersOnReceive off

$template RocheSysLog,%programname% %msg%\n

#
# Include all config files in /home/roche/etc/rsyslog.d/ # $IncludeConfig 
/home/roche/etc/rsyslog.d/*.conf

# allow reading for all users
$FileCreateMode 0644

*.* /home/roche/share/log/syslog

# and disable reading again
$FileCreateMode 0640

# End /etc/rsyslog.conf
 ! 
rsyslog.conf---

 /etc/init.d/rsyslogd 
---
#!/bin/sh
#
# rsyslog server
#

PREFIX=rsyslog: 
THISFILE=$0
PIDFILE=/tmp/.rsyslog-lock

usage() {
echo ${PREFIX}usage: $THISFILE [start|stop]
}

case $1 in

start)
echo ${PREFIX} starting
if [ -e $PIDFILE ]; then
echo ${PREFIX} another rsyslog server seems to be 
running, aborting
exit 1
else
/usr/sbin/rsyslogd -c5 -f /etc/rsyslog.conf -i $PIDFILE 
-n 2/dev/null 1/dev/null 
fi
;;

stop)
echo ${PREFIX} stopping
if [ ! -e $PIDFILE ]; then
echo ${PREFIX} there seems to be no server running
exit 1
fi
kill `cat $PIDFILE`
rm -f $PIDFILE
pkill rsyslogd
echo ${PREFIX} done
;;

*)

usage
exit 1
;;
esac
 ! /etc/init.d/rsyslogd 
---

Best regards
--
Eric
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


[rsyslog] Replace ' with '' in msg

2012-11-30 Thread Schmidauer Martin
We use rsyslog to fill our MSSQL database with exim mail logs. Sometimes in
msg there is a ' character (39 dez) wich the MSSQL interprets. The solution
on the MSSQL side is to escape the ' with a secon one. Is there a
possibility to change the content oft he msg in this way?

Thanks, Martin





smime.p7s
Description: S/MIME cryptographic signature
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Re: [rsyslog] Replace ' with '' in msg

2012-11-30 Thread Rainer Gerhards
 -Original Message-
 From: rsyslog-boun...@lists.adiscon.com [mailto:rsyslog-
 boun...@lists.adiscon.com] On Behalf Of Schmidauer Martin
 Sent: Friday, November 30, 2012 1:02 PM
 To: rsyslog@lists.adiscon.com
 Subject: [rsyslog] Replace ' with '' in msg
 
 We use rsyslog to fill our MSSQL database with exim mail logs.
 Sometimes in
 msg there is a ' character (39 dez) wich the MSSQL interprets. The
 solution
 on the MSSQL side is to escape the ' with a secon one. 

Have you configured mysql to use ANSI standard escaping? Usually, \' is 
required in mysql (unfortunately).

If you reconfigured, the default template does not work, you need to provide 
your own with the STDSQL template option.

Rainer
Is there a
 possibility to change the content oft he msg in this way?
 
 Thanks, Martin
 
 

___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] Replace ' with '' in msg

2012-11-30 Thread Schmidauer Martin

 Have you configured mysql to use ANSI standard escaping? Usually, \' is
 required in mysql (unfortunately).

We are using MSSQL, not MySQL. Obviously \' is used in our present rsyslog 
configuration. The template looks like:
$template MSSQL-exim_out,exec dbo.insertEmail_Out @host='%HOSTNAME%', 
@message='%msg',SQL




 
 If you reconfigured, the default template does not work, you need to
 provide your own with the STDSQL template option.
 
 Rainer
 Is there a
  possibility to change the content oft he msg in this way?
 
  Thanks, Martin
 
 
 
 ___
 rsyslog mailing list
 http://lists.adiscon.net/mailman/listinfo/rsyslog
 http://www.rsyslog.com/professional-services/
 What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL:
 This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond
 our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] Replace ' with '' in msg

2012-11-30 Thread Rainer Gerhards
 -Original Message-
 From: rsyslog-boun...@lists.adiscon.com [mailto:rsyslog-
 boun...@lists.adiscon.com] On Behalf Of Schmidauer Martin
 Sent: Friday, November 30, 2012 1:27 PM
 To: rsyslog-users
 Subject: Re: [rsyslog] Replace ' with '' in msg
 
 
  Have you configured mysql to use ANSI standard escaping? Usually, \'
 is
  required in mysql (unfortunately).
 
 We are using MSSQL, not MySQL. Obviously \' is used in our present
 rsyslog configuration. The template looks like:
 $template MSSQL-exim_out,exec dbo.insertEmail_Out @host='%HOSTNAME%',
 @message='%msg',SQL

Then you need to use the STDSQL option, details: 
http://www.rsyslog.com/doc/rsyslog_conf_templates.html

Rainer
 
 
 
 
 
  If you reconfigured, the default template does not work, you need to
  provide your own with the STDSQL template option.
 
  Rainer
  Is there a
   possibility to change the content oft he msg in this way?
  
   Thanks, Martin
  
  
 
  ___
  rsyslog mailing list
  http://lists.adiscon.net/mailman/listinfo/rsyslog
  http://www.rsyslog.com/professional-services/
  What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE
 WELL:
  This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
 sites beyond
  our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
 THAT.
 ___
 rsyslog mailing list
 http://lists.adiscon.net/mailman/listinfo/rsyslog
 http://www.rsyslog.com/professional-services/
 What's up with rsyslog? Follow https://twitter.com/rgerhards
 NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
 myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST
 if you DON'T LIKE THAT.
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


[rsyslog] Ubuntu 12 (Precise) v7-devel packages

2012-11-30 Thread Andre Lorbach
Hi all, 

a few month ago we made our own RPM repository available for testing, and it 
has been a great help for users and admins to distribute the latest RSyslog 
Versions on their systems. 

So to expand the availability of RSyslog V7 to our Ubuntu users, we are happy 
to announce our first Ubuntu repository for RSyslog, currently containing the 
latest v7-devel and needed packages. These packages should work well on Ubuntu 
12 systems, our own tests were successful. It's my first shot at building deb's 
for Ubuntu, so I'd appreciate if someone could try them out and let me know any 
problems or other general feedback.

All necessary details can be found here: 
http://www.rsyslog.com/ubuntu-repository/

Best regards,
Andre Lorbach
Adiscon
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] Ubuntu 12 (Precise) v7-devel packages

2012-11-30 Thread Radu Gheorghe
Thanks Andre! That sounds really promising :)

I'll probably give it a go soon and send some feedback if I have any.

Best regards,
Radu

2012/11/30 Andre Lorbach alorb...@ro1.adiscon.com

 Hi all,

 a few month ago we made our own RPM repository available for testing, and
 it has been a great help for users and admins to distribute the latest
 RSyslog Versions on their systems.

 So to expand the availability of RSyslog V7 to our Ubuntu users, we are
 happy to announce our first Ubuntu repository for RSyslog, currently
 containing the latest v7-devel and needed packages. These packages should
 work well on Ubuntu 12 systems, our own tests were successful. It's my
 first shot at building deb's for Ubuntu, so I'd appreciate if someone could
 try them out and let me know any problems or other general feedback.

 All necessary details can be found here:
 http://www.rsyslog.com/ubuntu-repository/

 Best regards,
 Andre Lorbach
 Adiscon
 ___
 rsyslog mailing list
 http://lists.adiscon.net/mailman/listinfo/rsyslog
 http://www.rsyslog.com/professional-services/
 What's up with rsyslog? Follow https://twitter.com/rgerhards
 NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
 of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
 DON'T LIKE THAT.

___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] Ruleset Queues in v7

2012-11-30 Thread Rainer Gerhards
   You can put queue.type=linkedlist within the action. That would
  make
   an
   action queue that would be specific for that action.
  
   If you want to define a different incoming queue per ruleset... I
  don't
   know how to do that. At least not from the top of my head. But I
 can
   try to
   find out if you need that and nobody else comes up with a
 suggestion.
 
  I put it on my todo list. It may be that I overlooked that case.
  Usually not a problem, but I modeled (by intention) the ruleset()
  construct so that the legacy ruleset directives can not be  used to
  modify the new-style object. Will try to find an answer (and
 solution,
  if necessary) within the next few days. Ping me if I do not come
 back!
 
 I have now at least checked the code in question. I actually overlooked
 that problem. The current versions do not support ruleset queues in
 new-style config. I hope to be able to look at a cure today.

I have now fixed it:
http://git.adiscon.com/?p=rsyslog.git;a=commitdiff;h=62f6a7d7b4b3c9fee0fffea961a201d24a059b2c

Read the commit comment - there is potential for users error when configuring 
this, but I think I will solve that in v7.3, as the regression potential is too 
large and the risk bearable (we had a similar issue for several years without 
bug reports).

Rainer
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] Please help with Snare Format

2012-11-30 Thread David Lang

On Thu, 29 Nov 2012, jdguingao wrote:


Will it still force escape even if I use this directive
$EscapeControlCharactersOnReceive off ?


I'm not sure, but if it doesn't, then it won't do anything (since the tests look 
for the escaped character sequences). It wouldn't be a lot of work to modify it 
to handle the non-escaped characters, but you would then need to compile your 
own copy (until the next release)


David Lang
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] [empty syslog] after powerfail

2012-11-30 Thread David Lang

On Fri, 30 Nov 2012, Keller, Eric wrote:


Hi everybody,

I did seek for an answer on your mailing list archive, but did not get a 
concrete answer concerning the problem I am witnessing with rsyslog and power 
failure.
Here are more info:

rsyslog version: 5.8.5

it happens sporadically that our syslog log file does contain only few system 
logs like kernel logs but not any of our logs!
We isolated the problem down and could only reproduce the problem by producing 
a hard shutdown (hitting the power button)


rsyslog buffers logs in memory, and it does not force a fsync after every log 
message is written. As a result, when you do a hard shutdown logs will be lost. 
There are parameters to tweak this, but it has a very significant effect on the 
rate that rsyslog can process log messages (in the most paranoid mode where zero 
log messages would be lost, you can drop from ~400K logs/sec down to ~50 
logs/sec if you don't have a high-end disk setup)


When starting up, we noticed that the rsyslogd is running despite no lock was 
created in the /tmp/.rsyslog-lock
Another consequence is that our /home/roche/share/log/syslog does not log any 
of our project traces.


this sounds like there is something else that's starting rsyslog, other than the 
scripts you are showing below.


David Lang



Killing rsyslogd and starting it again will start to log our project entries 
into the syslog!

Does someone out there encountered the same problems? Do someone have an idea 
why this happens?
Does someone sees a misconfiguration ? Or should I start the rsyslogd in 
another way?


here are the configuration files: note: there are no additional configuration 
files in the /home/roche/etc/rsyslog.d/

 
rsyslog.conf---
# Begin /etc/rsyslog.conf

$ModLoad immark # provides --MARK-- message capability $ModLoad imuxsock # 
provides support for local system logging (e.g. via logger command) $ModLoad 
imklog # provides kernel logging support (previously done by rklogd)

daemon.* -/var/log/daemon.log
kern.* -/var/log/kern.log
user.* -/var/log/user.log

# Use traditional timestamp format.
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat

$EscapeControlCharactersOnReceive off

$template RocheSysLog,%programname% %msg%\n

#
# Include all config files in /home/roche/etc/rsyslog.d/ # $IncludeConfig 
/home/roche/etc/rsyslog.d/*.conf

# allow reading for all users
$FileCreateMode 0644

*.* /home/roche/share/log/syslog

# and disable reading again
$FileCreateMode 0640

# End /etc/rsyslog.conf
 ! 
rsyslog.conf---

 /etc/init.d/rsyslogd 
---
#!/bin/sh
#
# rsyslog server
#

PREFIX=rsyslog: 
THISFILE=$0
PIDFILE=/tmp/.rsyslog-lock

usage() {
echo ${PREFIX}usage: $THISFILE [start|stop]
}

case $1 in

start)
echo ${PREFIX} starting
if [ -e $PIDFILE ]; then
echo ${PREFIX} another rsyslog server seems to be running, 
aborting
exit 1
else
/usr/sbin/rsyslogd -c5 -f /etc/rsyslog.conf -i $PIDFILE -n 
2/dev/null 1/dev/null 
fi
;;

stop)
echo ${PREFIX} stopping
if [ ! -e $PIDFILE ]; then
echo ${PREFIX} there seems to be no server running
exit 1
fi
kill `cat $PIDFILE`
rm -f $PIDFILE
pkill rsyslogd
echo ${PREFIX} done
;;

*)

usage
exit 1
;;
esac
 ! /etc/init.d/rsyslogd 
---

Best regards
--
Eric
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] Ubuntu 12 (Precise) v7-devel packages

2012-11-30 Thread David Lang

On Fri, 30 Nov 2012, Andre Lorbach wrote:


Hi all,

a few month ago we made our own RPM repository available for testing, and it 
has been a great help for users and admins to distribute the latest RSyslog 
Versions on their systems.

So to expand the availability of RSyslog V7 to our Ubuntu users, we are happy 
to announce our first Ubuntu repository for RSyslog, currently containing the 
latest v7-devel and needed packages. These packages should work well on Ubuntu 
12 systems, our own tests were successful. It's my first shot at building deb's 
for Ubuntu, so I'd appreciate if someone could try them out and let me know any 
problems or other general feedback.

All necessary details can be found here: 
http://www.rsyslog.com/ubuntu-repository/


Andre, it looks like you are very close to having this setup in a way that can 
be used as a PPA (It may even be there, just with changes in the instructions).


It's probably worth going to the slight extra effort to be able to define this 
as a PPA. I don't know if I'll have any chance to look at exactly what is needed 
for this today, but I'll try to get to it.


If anyone knows what needs to be done, please speak up and save me the research 
time :-)


David Lang
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] Ubuntu 12 (Precise) v7-devel packages

2012-11-30 Thread Todd Mortensen
Are you looking at what it would take to add as an ubuntu ppa?  They
would just need to submit to create a ppa and then add them to the ppa
by submitting each of the .changes file via dput.

I recently did this for a rsyslog 7.2.3 package as a ppa.

https://launchpad.net/~tmortensen/+archive/rsyslogv7

I have packages complete for precise.  I am still working on back
porting to older ubuntu releases.

On Fri, Nov 30, 2012 at 9:59 AM, David Lang da...@lang.hm wrote:
 On Fri, 30 Nov 2012, Andre Lorbach wrote:

 Hi all,

 a few month ago we made our own RPM repository available for testing, and
 it has been a great help for users and admins to distribute the latest
 RSyslog Versions on their systems.

 So to expand the availability of RSyslog V7 to our Ubuntu users, we are
 happy to announce our first Ubuntu repository for RSyslog, currently
 containing the latest v7-devel and needed packages. These packages should
 work well on Ubuntu 12 systems, our own tests were successful. It's my first
 shot at building deb's for Ubuntu, so I'd appreciate if someone could try
 them out and let me know any problems or other general feedback.

 All necessary details can be found here:
 http://www.rsyslog.com/ubuntu-repository/


 Andre, it looks like you are very close to having this setup in a way that
 can be used as a PPA (It may even be there, just with changes in the
 instructions).

 It's probably worth going to the slight extra effort to be able to define
 this as a PPA. I don't know if I'll have any chance to look at exactly what
 is needed for this today, but I'll try to get to it.

 If anyone knows what needs to be done, please speak up and save me the
 research time :-)

 David Lang

 ___
 rsyslog mailing list
 http://lists.adiscon.net/mailman/listinfo/rsyslog
 http://www.rsyslog.com/professional-services/
 What's up with rsyslog? Follow https://twitter.com/rgerhards
 NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
 sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
 LIKE THAT.
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] Ubuntu 12 (Precise) v7-devel packages

2012-11-30 Thread David Lang

On Fri, 30 Nov 2012, Todd Mortensen wrote:


Are you looking at what it would take to add as an ubuntu ppa?  They
would just need to submit to create a ppa and then add them to the ppa
by submitting each of the .changes file via dput.

I recently did this for a rsyslog 7.2.3 package as a ppa.

https://launchpad.net/~tmortensen/+archive/rsyslogv7

I have packages complete for precise.  I am still working on back
porting to older ubuntu releases.


Almost, I was hopeing that there is a way to create a ppa that points at the 
repository that Andre setup, so that they don't have to do the extra step of 
uploading each new version to launchpad.


David Lang


On Fri, Nov 30, 2012 at 9:59 AM, David Lang da...@lang.hm wrote:

On Fri, 30 Nov 2012, Andre Lorbach wrote:


Hi all,

a few month ago we made our own RPM repository available for testing, and
it has been a great help for users and admins to distribute the latest
RSyslog Versions on their systems.

So to expand the availability of RSyslog V7 to our Ubuntu users, we are
happy to announce our first Ubuntu repository for RSyslog, currently
containing the latest v7-devel and needed packages. These packages should
work well on Ubuntu 12 systems, our own tests were successful. It's my first
shot at building deb's for Ubuntu, so I'd appreciate if someone could try
them out and let me know any problems or other general feedback.

All necessary details can be found here:
http://www.rsyslog.com/ubuntu-repository/



Andre, it looks like you are very close to having this setup in a way that
can be used as a PPA (It may even be there, just with changes in the
instructions).

It's probably worth going to the slight extra effort to be able to define
this as a PPA. I don't know if I'll have any chance to look at exactly what
is needed for this today, but I'll try to get to it.

If anyone knows what needs to be done, please speak up and save me the
research time :-)

David Lang

___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
LIKE THAT.

___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] Ubuntu 12 (Precise) v7-devel packages

2012-11-30 Thread Todd Mortensen
As far as I know there is no way to define a custom repo inside of
another .deb package.  I suppose you could have it add the custom repo
to the system during the install and have it then run apt-get install
again.  But that seems a bit convoluted to just avoid uploading to
launchpad.

One thing I am not clear on about this new repository is it for the
-devel branch or -stable.

On the page it says it is for -stable.

Please note that the Ubuntu Repository is open for testing at the
moment, and contains only the latest Version for v7-stable.

But the packages are for v7-devel 7.3.4.  vs 7.2.3 which is the latest
stable release.


On Fri, Nov 30, 2012 at 10:42 AM, David Lang da...@lang.hm wrote:
 On Fri, 30 Nov 2012, Todd Mortensen wrote:

 Are you looking at what it would take to add as an ubuntu ppa?  They
 would just need to submit to create a ppa and then add them to the ppa
 by submitting each of the .changes file via dput.

 I recently did this for a rsyslog 7.2.3 package as a ppa.

 https://launchpad.net/~tmortensen/+archive/rsyslogv7

 I have packages complete for precise.  I am still working on back
 porting to older ubuntu releases.


 Almost, I was hopeing that there is a way to create a ppa that points at the
 repository that Andre setup, so that they don't have to do the extra step of
 uploading each new version to launchpad.

 David Lang


 On Fri, Nov 30, 2012 at 9:59 AM, David Lang da...@lang.hm wrote:

 On Fri, 30 Nov 2012, Andre Lorbach wrote:

 Hi all,

 a few month ago we made our own RPM repository available for testing,
 and
 it has been a great help for users and admins to distribute the latest
 RSyslog Versions on their systems.

 So to expand the availability of RSyslog V7 to our Ubuntu users, we are
 happy to announce our first Ubuntu repository for RSyslog, currently
 containing the latest v7-devel and needed packages. These packages
 should
 work well on Ubuntu 12 systems, our own tests were successful. It's my
 first
 shot at building deb's for Ubuntu, so I'd appreciate if someone could
 try
 them out and let me know any problems or other general feedback.

 All necessary details can be found here:
 http://www.rsyslog.com/ubuntu-repository/



 Andre, it looks like you are very close to having this setup in a way
 that
 can be used as a PPA (It may even be there, just with changes in the
 instructions).

 It's probably worth going to the slight extra effort to be able to define
 this as a PPA. I don't know if I'll have any chance to look at exactly
 what
 is needed for this today, but I'll try to get to it.

 If anyone knows what needs to be done, please speak up and save me the
 research time :-)

 David Lang

 ___
 rsyslog mailing list
 http://lists.adiscon.net/mailman/listinfo/rsyslog
 http://www.rsyslog.com/professional-services/
 What's up with rsyslog? Follow https://twitter.com/rgerhards
 NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
 of
 sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
 LIKE THAT.

 ___
 rsyslog mailing list
 http://lists.adiscon.net/mailman/listinfo/rsyslog
 http://www.rsyslog.com/professional-services/
 What's up with rsyslog? Follow https://twitter.com/rgerhards
 NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
 of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
 LIKE THAT.

 ___
 rsyslog mailing list
 http://lists.adiscon.net/mailman/listinfo/rsyslog
 http://www.rsyslog.com/professional-services/
 What's up with rsyslog? Follow https://twitter.com/rgerhards
 NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
 sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
 LIKE THAT.
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] Ubuntu 12 (Precise) v7-devel packages

2012-11-30 Thread David Lang

On Fri, 30 Nov 2012, Todd Mortensen wrote:


As far as I know there is no way to define a custom repo inside of
another .deb package.  I suppose you could have it add the custom repo
to the system during the install and have it then run apt-get install
again.  But that seems a bit convoluted to just avoid uploading to
launchpad.


Ok, I was under the impression that a ppa added a new repository, so I was 
thinking that you could have the ppa process add the adiscon repository instead 
of a launchpad repository. This is about what the instructions tell you to do 
now, but the ppa mechanism is a few less steps (and has marketing type 
advantages)


David Lang


One thing I am not clear on about this new repository is it for the
-devel branch or -stable.

On the page it says it is for -stable.

Please note that the Ubuntu Repository is open for testing at the
moment, and contains only the latest Version for v7-stable.

But the packages are for v7-devel 7.3.4.  vs 7.2.3 which is the latest
stable release.


On Fri, Nov 30, 2012 at 10:42 AM, David Lang da...@lang.hm wrote:

On Fri, 30 Nov 2012, Todd Mortensen wrote:


Are you looking at what it would take to add as an ubuntu ppa?  They
would just need to submit to create a ppa and then add them to the ppa
by submitting each of the .changes file via dput.

I recently did this for a rsyslog 7.2.3 package as a ppa.

https://launchpad.net/~tmortensen/+archive/rsyslogv7

I have packages complete for precise.  I am still working on back
porting to older ubuntu releases.



Almost, I was hopeing that there is a way to create a ppa that points at the
repository that Andre setup, so that they don't have to do the extra step of
uploading each new version to launchpad.

David Lang



On Fri, Nov 30, 2012 at 9:59 AM, David Lang da...@lang.hm wrote:


On Fri, 30 Nov 2012, Andre Lorbach wrote:


Hi all,

a few month ago we made our own RPM repository available for testing,
and
it has been a great help for users and admins to distribute the latest
RSyslog Versions on their systems.

So to expand the availability of RSyslog V7 to our Ubuntu users, we are
happy to announce our first Ubuntu repository for RSyslog, currently
containing the latest v7-devel and needed packages. These packages
should
work well on Ubuntu 12 systems, our own tests were successful. It's my
first
shot at building deb's for Ubuntu, so I'd appreciate if someone could
try
them out and let me know any problems or other general feedback.

All necessary details can be found here:
http://www.rsyslog.com/ubuntu-repository/




Andre, it looks like you are very close to having this setup in a way
that
can be used as a PPA (It may even be there, just with changes in the
instructions).

It's probably worth going to the slight extra effort to be able to define
this as a PPA. I don't know if I'll have any chance to look at exactly
what
is needed for this today, but I'll try to get to it.

If anyone knows what needs to be done, please speak up and save me the
research time :-)

David Lang

___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
LIKE THAT.


___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
LIKE THAT.


___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
LIKE THAT.

___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] Ubuntu 12 (Precise) v7-devel packages

2012-11-30 Thread Rainer Gerhards
is there a problem if the private package *replaces* an official one (as is the 
case here)?


Sent from phone, thus brief.

David Lang da...@lang.hm hat geschrieben:
On Fri, 30 Nov 2012, Todd Mortensen wrote:

 As far as I know there is no way to define a custom repo inside of
 another .deb package.  I suppose you could have it add the custom repo
 to the system during the install and have it then run apt-get install
 again.  But that seems a bit convoluted to just avoid uploading to
 launchpad.

Ok, I was under the impression that a ppa added a new repository, so I was
thinking that you could have the ppa process add the adiscon repository instead
of a launchpad repository. This is about what the instructions tell you to do
now, but the ppa mechanism is a few less steps (and has marketing type
advantages)

David Lang

 One thing I am not clear on about this new repository is it for the
 -devel branch or -stable.

 On the page it says it is for -stable.

 Please note that the Ubuntu Repository is open for testing at the
 moment, and contains only the latest Version for v7-stable.

 But the packages are for v7-devel 7.3.4.  vs 7.2.3 which is the latest
 stable release.


 On Fri, Nov 30, 2012 at 10:42 AM, David Lang da...@lang.hm wrote:
 On Fri, 30 Nov 2012, Todd Mortensen wrote:

 Are you looking at what it would take to add as an ubuntu ppa?  They
 would just need to submit to create a ppa and then add them to the ppa
 by submitting each of the .changes file via dput.

 I recently did this for a rsyslog 7.2.3 package as a ppa.

 https://launchpad.net/~tmortensen/+archive/rsyslogv7

 I have packages complete for precise.  I am still working on back
 porting to older ubuntu releases.


 Almost, I was hopeing that there is a way to create a ppa that points at the
 repository that Andre setup, so that they don't have to do the extra step of
 uploading each new version to launchpad.

 David Lang


 On Fri, Nov 30, 2012 at 9:59 AM, David Lang da...@lang.hm wrote:

 On Fri, 30 Nov 2012, Andre Lorbach wrote:

 Hi all,

 a few month ago we made our own RPM repository available for testing,
 and
 it has been a great help for users and admins to distribute the latest
 RSyslog Versions on their systems.

 So to expand the availability of RSyslog V7 to our Ubuntu users, we are
 happy to announce our first Ubuntu repository for RSyslog, currently
 containing the latest v7-devel and needed packages. These packages
 should
 work well on Ubuntu 12 systems, our own tests were successful. It's my
 first
 shot at building deb's for Ubuntu, so I'd appreciate if someone could
 try
 them out and let me know any problems or other general feedback.

 All necessary details can be found here:
 http://www.rsyslog.com/ubuntu-repository/



 Andre, it looks like you are very close to having this setup in a way
 that
 can be used as a PPA (It may even be there, just with changes in the
 instructions).

 It's probably worth going to the slight extra effort to be able to define
 this as a PPA. I don't know if I'll have any chance to look at exactly
 what
 is needed for this today, but I'll try to get to it.

 If anyone knows what needs to be done, please speak up and save me the
 research time :-)

 David Lang

 ___
 rsyslog mailing list
 http://lists.adiscon.net/mailman/listinfo/rsyslog
 http://www.rsyslog.com/professional-services/
 What's up with rsyslog? Follow https://twitter.com/rgerhards
 NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
 of
 sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
 LIKE THAT.

 ___
 rsyslog mailing list
 http://lists.adiscon.net/mailman/listinfo/rsyslog
 http://www.rsyslog.com/professional-services/
 What's up with rsyslog? Follow https://twitter.com/rgerhards
 NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
 of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
 LIKE THAT.

 ___
 rsyslog mailing list
 http://lists.adiscon.net/mailman/listinfo/rsyslog
 http://www.rsyslog.com/professional-services/
 What's up with rsyslog? Follow https://twitter.com/rgerhards
 NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
 sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
 LIKE THAT.
 ___
 rsyslog mailing list
 http://lists.adiscon.net/mailman/listinfo/rsyslog
 http://www.rsyslog.com/professional-services/
 What's up with rsyslog? Follow https://twitter.com/rgerhards
 NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
 sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T 
 LIKE THAT.

___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's 

Re: [rsyslog] Ubuntu 12 (Precise) v7-devel packages

2012-11-30 Thread Andre Lorbach
 thanks for that effort. Without having had a closer look at the package 
 itself, I
 just wondered if you based it on the latest Ubuntu or Debian package?

It is based on the latest Ubuntu RSyslog package I could install on Ubuntu 
12.04. 
What I basically did was taking the package source, modifying, adding and 
updating dependencies like libee, libestr, librelp. 
Then I created a local repository using mini-dinstall and dput, and added all 
these packages to it. 
After initially and successful testing, I uploaded the local repository to our 
webserver. 

 Also, an observation while skimming through the repo: The 0ubuntu?
 versioning scheme is usually reserved for official Ubuntu packages.
 You could use 0adisconX or something like that. This would have the
 additional benefit, that once there is an official Ubuntu package available, 
 it
 would supersede your version as XXX-0ubuntuX  XXX-0adisconX

Thanks for the hint, I wasn't aware of this versioning fact. Your 
recommendation sounds reasonable, I will change this with the next package 
update. 
 
Best regards,
Andre Lorbach
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.