Re: [rsyslog] cee json + mmsequence
2014-12-02 21:59 GMT+01:00 Brian Knox : > We have a case where we are receiving messages in @cee: format, and would > like to add a sequence variable generated via mmsequence to the message. > > Before I spend too much time digging into this I wanted to ask if, using > some template hackery and json subtrees, this is something that sounds > possible - and if maybe someone else was already doing it. > > David has answered the real question, just let me add that mmsequence was a work-around for v7 where global variables were not available. It is now deprecated and will probably removed in a couple of month. I'll check the doc if it tells this clearly enough. Rainer > Thanks! > Brian > ___ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > ___ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: [rsyslog] Could not activate RELP Listener, code 10046
I am really sorry for inconvenience sir. I could not paste link in haste. Please have a look on config.log produced by running ./configure --enable-tls . Thanks http://pastebin.com/ccEiVHA4 On Wed, Dec 3, 2014 at 10:05 AM, David Lang wrote: > I'm assuming that there was supposed to be an attachment that the list > filtered out. Either send it to Rainer directly or put it on pastebin or > something like that. > > David Lang > > On Wed, 3 Dec 2014, Muhammad Asif wrote: > > Dear Sir, >> >> Please have a look on config.log produced by running ./configure >> --enable-tls . Thanks >> >> On Tue, Dec 2, 2014 at 10:36 PM, Rainer Gerhards < >> rgerha...@hq.adiscon.com> >> wrote: >> >> 2014-12-02 15:15 GMT+01:00 Muhammad Asif : >>> >>> Hi Sir, I build librelp 1.2.7 with --enable-tls and --disable-tls but no to >>> avail. >>> Problem is there. What is the recommended way for buillding librelp. >>> I would expect that the problem is that GnuTLS is not properly detected. >>> Can you post (probably via a github gist or pastbin or...) a copy of your >>> config.log after the librelp ./configure --enable-tls run. >>> >>> Rainer >>> >>> >>> ___ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > ___ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: [rsyslog] Could not activate RELP Listener, code 10046
I line 784 it tells you that the gnutls_certificate_set_verify_function() is not available, which means GnuTLS is too old. This function is needed to turn on TLS authentication. Maybe you have just messed up the install locations for your components? Rainer 2014-12-03 10:36 GMT+01:00 Muhammad Asif : > I am really sorry for inconvenience sir. I could not paste link in haste. > Please have a look on config.log produced by running ./configure > --enable-tls . Thanks > > http://pastebin.com/ccEiVHA4 > > On Wed, Dec 3, 2014 at 10:05 AM, David Lang wrote: > > > I'm assuming that there was supposed to be an attachment that the list > > filtered out. Either send it to Rainer directly or put it on pastebin or > > something like that. > > > > David Lang > > > > On Wed, 3 Dec 2014, Muhammad Asif wrote: > > > > Dear Sir, > >> > >> Please have a look on config.log produced by running ./configure > >> --enable-tls . Thanks > >> > >> On Tue, Dec 2, 2014 at 10:36 PM, Rainer Gerhards < > >> rgerha...@hq.adiscon.com> > >> wrote: > >> > >> 2014-12-02 15:15 GMT+01:00 Muhammad Asif : > >>> > >>> Hi Sir, > > I build librelp 1.2.7 with --enable-tls and --disable-tls but no to > > >>> avail. > >>> > Problem is there. What is the recommended way for buillding librelp. > > > >>> I would expect that the problem is that GnuTLS is not properly > detected. > >>> Can you post (probably via a github gist or pastbin or...) a copy of > your > >>> config.log after the librelp ./configure --enable-tls run. > >>> > >>> Rainer > >>> > >>> > >>> ___ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > DON'T LIKE THAT. > > > ___ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > ___ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
[rsyslog] IMPORTANT: -devel packages go away
Hi all, if you happen to use the devel packages, you need to change that to v8-stable or you will get into trouble. Details here: http://blog.gerhards.net/2014/12/rsyslog-devel-packages-are-being.html Rainer ___ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: [rsyslog] cee json + mmsequence
So two questions then: 1. In the case of using mmjsonparse on messages where we do not know ahead of time what all the. json attributes will be, is there a var for a place in the tree where we can get all attributes that were in the cee message? 2. If mmsequence is being deprecated, is there a pointer to how to increment global variables to provide a sequence? 3. This morning I remembered the "mmcount" module - is this also being deprecated in favor of global variables? Brian On Wed, Dec 3, 2014 at 3:52 AM, Rainer Gerhards wrote: > 2014-12-02 21:59 GMT+01:00 Brian Knox : > > > We have a case where we are receiving messages in @cee: format, and would > > like to add a sequence variable generated via mmsequence to the message. > > > > Before I spend too much time digging into this I wanted to ask if, using > > some template hackery and json subtrees, this is something that sounds > > possible - and if maybe someone else was already doing it. > > > > > David has answered the real question, just let me add that mmsequence was a > work-around for v7 where global variables were not available. It is now > deprecated and will probably removed in a couple of month. > > I'll check the doc if it tells this clearly enough. > > Rainer > > > Thanks! > > Brian > > ___ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > DON'T LIKE THAT. > > > ___ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > ___ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: [rsyslog] cee json + mmsequence
er, three questions ;) On Wed, Dec 3, 2014 at 6:04 AM, Brian Knox wrote: > So two questions then: > > 1. In the case of using mmjsonparse on messages where we do not know > ahead of time what all the. json attributes will be, is there a var for a > place in the tree where we can get all attributes that were in the cee > message? > > 2. If mmsequence is being deprecated, is there a pointer to how to > increment global variables to provide a sequence? > > 3. This morning I remembered the "mmcount" module - is this also being > deprecated in favor of global variables? > > Brian > > On Wed, Dec 3, 2014 at 3:52 AM, Rainer Gerhards > wrote: > >> 2014-12-02 21:59 GMT+01:00 Brian Knox : >> >> > We have a case where we are receiving messages in @cee: format, and >> would >> > like to add a sequence variable generated via mmsequence to the message. >> > >> > Before I spend too much time digging into this I wanted to ask if, using >> > some template hackery and json subtrees, this is something that sounds >> > possible - and if maybe someone else was already doing it. >> > >> > >> David has answered the real question, just let me add that mmsequence was >> a >> work-around for v7 where global variables were not available. It is now >> deprecated and will probably removed in a couple of month. >> >> I'll check the doc if it tells this clearly enough. >> >> Rainer >> >> > Thanks! >> > Brian >> > ___ >> > rsyslog mailing list >> > http://lists.adiscon.net/mailman/listinfo/rsyslog >> > http://www.rsyslog.com/professional-services/ >> > What's up with rsyslog? Follow https://twitter.com/rgerhards >> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> > DON'T LIKE THAT. >> > >> ___ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. >> > > ___ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: [rsyslog] cee json + mmsequence
On Wed, 3 Dec 2014, Brian Knox wrote: So two questions then: 1. In the case of using mmjsonparse on messages where we do not know ahead of time what all the. json attributes will be, is there a var for a place in the tree where we can get all attributes that were in the cee message? There are three 'classes' of variables $! are 'normal' variables, the place that mmjsonparse, etc put the results of parsing the cee message by default. $. are 'local' variables, they are a place you can put stuff that you don't want to end up in a message when you output $! $\ are 'global' variables, unlike the others, they persist from message to message. All of these variables are a tree, where you can have $!foo!bar and $!foo!baz. If you just reference $!foo it will output both bar and baz as JSON so to see everything, parse the message and then output $! 2. If mmsequence is being deprecated, is there a pointer to how to increment global variables to provide a sequence? set $\var = $\var + 1; 3. This morning I remembered the "mmcount" module - is this also being deprecated in favor of global variables? probably. David Lang Brian On Wed, Dec 3, 2014 at 3:52 AM, Rainer Gerhards wrote: 2014-12-02 21:59 GMT+01:00 Brian Knox : We have a case where we are receiving messages in @cee: format, and would like to add a sequence variable generated via mmsequence to the message. Before I spend too much time digging into this I wanted to ask if, using some template hackery and json subtrees, this is something that sounds possible - and if maybe someone else was already doing it. David has answered the real question, just let me add that mmsequence was a work-around for v7 where global variables were not available. It is now deprecated and will probably removed in a couple of month. I'll check the doc if it tells this clearly enough. Rainer Thanks! Brian ___ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. ___ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. ___ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. ___ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.