Re: [rsyslog] cee json + mmsequence

2014-12-03 Thread Rainer Gerhards
2014-12-02 21:59 GMT+01:00 Brian Knox :

> We have a case where we are receiving messages in @cee: format, and would
> like to add a sequence variable generated via mmsequence to the message.
>
> Before I spend too much time digging into this I wanted to ask if, using
> some template hackery and json subtrees, this is something that sounds
> possible - and if maybe someone else was already doing it.
>
>
David has answered the real question, just let me add that mmsequence was a
work-around for v7 where global variables were not available. It is now
deprecated and will probably removed in a couple of month.

I'll check the doc if it tells this clearly enough.

Rainer

> Thanks!
> Brian
> ___
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] Could not activate RELP Listener, code 10046

2014-12-03 Thread Muhammad Asif
I am really sorry for inconvenience sir. I could not paste link in haste.
Please have a look on config.log produced by running   ./configure
 --enable-tls .  Thanks

http://pastebin.com/ccEiVHA4

On Wed, Dec 3, 2014 at 10:05 AM, David Lang  wrote:

> I'm assuming that there was supposed to be an attachment that the list
> filtered out. Either send it to Rainer directly or put it on pastebin or
> something like that.
>
> David Lang
>
> On Wed, 3 Dec 2014, Muhammad Asif wrote:
>
>  Dear Sir,
>>
>> Please have a look on config.log produced by running   ./configure
>> --enable-tls .  Thanks
>>
>> On Tue, Dec 2, 2014 at 10:36 PM, Rainer Gerhards <
>> rgerha...@hq.adiscon.com>
>> wrote:
>>
>>  2014-12-02 15:15 GMT+01:00 Muhammad Asif :
>>>
>>>  Hi Sir,

 I build librelp 1.2.7 with --enable-tls and --disable-tls but no to

>>> avail.
>>>
 Problem is there. What is the recommended way for buillding librelp.


>>> I would expect that the problem is that GnuTLS is not properly detected.
>>> Can you post (probably via a github gist or pastbin or...) a copy of your
>>> config.log after the librelp ./configure --enable-tls run.
>>>
>>> Rainer
>>>
>>>
>>>  ___
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] Could not activate RELP Listener, code 10046

2014-12-03 Thread Rainer Gerhards
I line 784 it tells you that the gnutls_certificate_set_verify_function()
is not available, which means GnuTLS is too old. This function is needed to
turn on TLS authentication.

Maybe you have just messed up the install locations for your components?

Rainer

2014-12-03 10:36 GMT+01:00 Muhammad Asif :

> I am really sorry for inconvenience sir. I could not paste link in haste.
> Please have a look on config.log produced by running   ./configure
>  --enable-tls .  Thanks
>
> http://pastebin.com/ccEiVHA4
>
> On Wed, Dec 3, 2014 at 10:05 AM, David Lang  wrote:
>
> > I'm assuming that there was supposed to be an attachment that the list
> > filtered out. Either send it to Rainer directly or put it on pastebin or
> > something like that.
> >
> > David Lang
> >
> > On Wed, 3 Dec 2014, Muhammad Asif wrote:
> >
> >  Dear Sir,
> >>
> >> Please have a look on config.log produced by running   ./configure
> >> --enable-tls .  Thanks
> >>
> >> On Tue, Dec 2, 2014 at 10:36 PM, Rainer Gerhards <
> >> rgerha...@hq.adiscon.com>
> >> wrote:
> >>
> >>  2014-12-02 15:15 GMT+01:00 Muhammad Asif :
> >>>
> >>>  Hi Sir,
> 
>  I build librelp 1.2.7 with --enable-tls and --disable-tls but no to
> 
> >>> avail.
> >>>
>  Problem is there. What is the recommended way for buillding librelp.
> 
> 
> >>> I would expect that the problem is that GnuTLS is not properly
> detected.
> >>> Can you post (probably via a github gist or pastbin or...) a copy of
> your
> >>> config.log after the librelp ./configure --enable-tls run.
> >>>
> >>> Rainer
> >>>
> >>>
> >>>  ___
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com/professional-services/
> > What's up with rsyslog? Follow https://twitter.com/rgerhards
> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> > DON'T LIKE THAT.
> >
> ___
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


[rsyslog] IMPORTANT: -devel packages go away

2014-12-03 Thread Rainer Gerhards
Hi all,

if you happen to use the devel packages, you need to change that to
v8-stable or you will get into trouble.

Details here:
http://blog.gerhards.net/2014/12/rsyslog-devel-packages-are-being.html

Rainer
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] cee json + mmsequence

2014-12-03 Thread Brian Knox
So two questions then:

1.  In the case of using mmjsonparse on messages where we do not know ahead
of time what all the. json attributes will be, is there a var for a place
in the tree where we can get all attributes that were in the cee message?

2. If mmsequence is being deprecated, is there a pointer to how to
increment global variables to provide a sequence?

3. This morning I remembered the "mmcount" module - is this also being
deprecated in favor of global variables?

Brian

On Wed, Dec 3, 2014 at 3:52 AM, Rainer Gerhards 
wrote:

> 2014-12-02 21:59 GMT+01:00 Brian Knox :
>
> > We have a case where we are receiving messages in @cee: format, and would
> > like to add a sequence variable generated via mmsequence to the message.
> >
> > Before I spend too much time digging into this I wanted to ask if, using
> > some template hackery and json subtrees, this is something that sounds
> > possible - and if maybe someone else was already doing it.
> >
> >
> David has answered the real question, just let me add that mmsequence was a
> work-around for v7 where global variables were not available. It is now
> deprecated and will probably removed in a couple of month.
>
> I'll check the doc if it tells this clearly enough.
>
> Rainer
>
> > Thanks!
> > Brian
> > ___
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com/professional-services/
> > What's up with rsyslog? Follow https://twitter.com/rgerhards
> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> > DON'T LIKE THAT.
> >
> ___
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] cee json + mmsequence

2014-12-03 Thread Brian Knox
er, three questions ;)

On Wed, Dec 3, 2014 at 6:04 AM, Brian Knox  wrote:

> So two questions then:
>
> 1.  In the case of using mmjsonparse on messages where we do not know
> ahead of time what all the. json attributes will be, is there a var for a
> place in the tree where we can get all attributes that were in the cee
> message?
>
> 2. If mmsequence is being deprecated, is there a pointer to how to
> increment global variables to provide a sequence?
>
> 3. This morning I remembered the "mmcount" module - is this also being
> deprecated in favor of global variables?
>
> Brian
>
> On Wed, Dec 3, 2014 at 3:52 AM, Rainer Gerhards 
> wrote:
>
>> 2014-12-02 21:59 GMT+01:00 Brian Knox :
>>
>> > We have a case where we are receiving messages in @cee: format, and
>> would
>> > like to add a sequence variable generated via mmsequence to the message.
>> >
>> > Before I spend too much time digging into this I wanted to ask if, using
>> > some template hackery and json subtrees, this is something that sounds
>> > possible - and if maybe someone else was already doing it.
>> >
>> >
>> David has answered the real question, just let me add that mmsequence was
>> a
>> work-around for v7 where global variables were not available. It is now
>> deprecated and will probably removed in a couple of month.
>>
>> I'll check the doc if it tells this clearly enough.
>>
>> Rainer
>>
>> > Thanks!
>> > Brian
>> > ___
>> > rsyslog mailing list
>> > http://lists.adiscon.net/mailman/listinfo/rsyslog
>> > http://www.rsyslog.com/professional-services/
>> > What's up with rsyslog? Follow https://twitter.com/rgerhards
>> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
>> > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
>> > DON'T LIKE THAT.
>> >
>> ___
>> rsyslog mailing list
>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>> http://www.rsyslog.com/professional-services/
>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
>> DON'T LIKE THAT.
>>
>
>
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] cee json + mmsequence

2014-12-03 Thread David Lang

On Wed, 3 Dec 2014, Brian Knox wrote:


So two questions then:

1.  In the case of using mmjsonparse on messages where we do not know ahead
of time what all the. json attributes will be, is there a var for a place
in the tree where we can get all attributes that were in the cee message?


There are three 'classes' of variables

$! are 'normal' variables, the place that mmjsonparse, etc put the results of 
parsing the cee message by default.


$. are 'local' variables, they are a place you can put stuff that you don't want 
to end up in a message when you output $!


$\ are 'global' variables, unlike the others, they persist from message to 
message.


All of these variables are a tree, where you can have $!foo!bar and $!foo!baz. 
If you just reference $!foo it will output both bar and baz as JSON


so to see everything, parse the message and then output $!


2. If mmsequence is being deprecated, is there a pointer to how to
increment global variables to provide a sequence?


set $\var = $\var + 1;


3. This morning I remembered the "mmcount" module - is this also being
deprecated in favor of global variables?


probably.

David Lang


Brian

On Wed, Dec 3, 2014 at 3:52 AM, Rainer Gerhards 
wrote:


2014-12-02 21:59 GMT+01:00 Brian Knox :


We have a case where we are receiving messages in @cee: format, and would
like to add a sequence variable generated via mmsequence to the message.

Before I spend too much time digging into this I wanted to ask if, using
some template hackery and json subtrees, this is something that sounds
possible - and if maybe someone else was already doing it.



David has answered the real question, just let me add that mmsequence was a
work-around for v7 where global variables were not available. It is now
deprecated and will probably removed in a couple of month.

I'll check the doc if it tells this clearly enough.

Rainer


Thanks!
Brian
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.


___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.


___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.