Re: [rsyslog] Am I missing something?

2017-02-14 Thread Dave Caplinger 
Just FYI, if you want to permit slashes in hostname, there is a similarly named 
option to specify this in a parser:

parser(name="pmrfc3164.hostname_with_slashes" type="pmrfc3164" 
permit.slashesinhostname="on")
ruleset(name="ruleset_eth0_514_tcp"
parser="pmrfc3164.hostname_with_slashes"
queue.size="1"
   ) {
...
  }
)

--
Dave Caplinger
NTT Security

On Feb 14, 2017, at 10:42 AM, Rainer Gerhards 
mailto:rgerha...@hq.adiscon.com>> wrote:

2017-02-14 17:35 GMT+01:00 mostolog--- via rsyslog <
rsyslog@lists.adiscon.com>:

Isn't that configuration option used to allow "slash in
syslogtag/appname/programname field"? why is then called ~hostname?


ah, it's actually a copy&paste error (I think). The option is
named parser.permitSlashInProgramname and is a global option. I'll update
the doc.It doesn't do more than what it sounds like.

Thx,
Rainer



El 14/02/17 a las 17:33, Rainer Gerhards escribió:

I don't understand the question.

RG


2017-02-14 16:46 GMT+01:00 mostolog--- via rsyslog <
rsyslog@lists.adiscon.com 
>:

   Why permitSlashInHostname is not permitSlashInTag instead?

   From:
   http://www.rsyslog.com/doc/master/configuration/properties.html
   

   ___
   rsyslog mailing list
   http://lists.adiscon.net/mailman/listinfo/rsyslog
   
   http://www.rsyslog.com/professional-services/
   
   What's up with rsyslog? Follow https://twitter.com/rgerhards
   NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
   myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT
   POST if you DON'T LIKE THAT.



___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.

___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Confidentiality Notice: The content of this communication, along with any 
attachments, is covered by federal and state law governing electronic 
communications and may contain confidential and legally privileged information. 
If the reader of this message is not the intended recipient, you are hereby 
notified that any dissemination, distribution, use or copying of the 
information contained herein is strictly prohibited. If you have received this 
communication in error, please immediately contact us by telephone at 
402.361.3000 or e-mail secur...@solutionary.com.

Copyright 2000-2017 NTT Security (US) Inc., a wholly-owned subsidiary of NTT 
Group. All rights reserved. ActiveGuard and Solutionary are registered 
trademarks and NTT Security is a trademark of NTT Security (US) Inc. 
Solutionary, the ActiveGuard logo icon, and the Solutionary logo icon are 
registered service marks of NTT Security (US) Inc.




Confidentiality Notice: The content of this communication, along with any 
attachments, is covered by federal and state law governing electronic 
communications and may contain confidential and legally privileged information. 
If the reader of this message is not the intended recipient, you are hereby 
notified that any dissemination, distribution, use or copying of the 
information contained herein is strictly prohibited. If you have received this 
communication in error, please immediately contact us by telephone at 
402.361.3000 or e-mail secur...@solutionary.com.

Copyright 2000-2017 NTT Security (US) Inc., a wholly-owned subsidiary of NTT 
Group. All rights reserved. ActiveGuard and Solutionary are registered 
trademarks and NTT Security is a trademark of NTT Security (US) Inc. 
Solutionary, the ActiveGuard logo icon, and the Solutionary logo icon are 
registered service marks of NTT Security (US) Inc.

___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Re: [rsyslog] Am I missing something?

2017-02-14 Thread Rainer Gerhards 
2017-02-14 17:35 GMT+01:00 mostolog--- via rsyslog <
rsyslog@lists.adiscon.com>:

> Isn't that configuration option used to allow "slash in
> syslogtag/appname/programname field"? why is then called ~hostname?
>

ah, it's actually a copy&paste error (I think). The option is
named parser.permitSlashInProgramname and is a global option. I'll update
the doc.It doesn't do more than what it sounds like.

Thx,
Rainer

>
>
> El 14/02/17 a las 17:33, Rainer Gerhards escribió:
>
>> I don't understand the question.
>>
>> RG
>>
>>
>> 2017-02-14 16:46 GMT+01:00 mostolog--- via rsyslog <
>> rsyslog@lists.adiscon.com >:
>>
>> Why permitSlashInHostname is not permitSlashInTag instead?
>>
>> From:
>> http://www.rsyslog.com/doc/master/configuration/properties.html
>> 
>>
>> ___
>> rsyslog mailing list
>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>> 
>> http://www.rsyslog.com/professional-services/
>> 
>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
>> myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT
>> POST if you DON'T LIKE THAT.
>>
>>
>>
> ___
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Re: [rsyslog] Am I missing something?

2017-02-14 Thread mostolog--- via rsyslog 
Isn't that configuration option used to allow "slash in 
syslogtag/appname/programname field"? why is then called ~hostname?



El 14/02/17 a las 17:33, Rainer Gerhards escribió:

I don't understand the question.

RG


2017-02-14 16:46 GMT+01:00 mostolog--- via rsyslog 
mailto:rsyslog@lists.adiscon.com>>:


Why permitSlashInHostname is not permitSlashInTag instead?

From:
http://www.rsyslog.com/doc/master/configuration/properties.html


___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog

http://www.rsyslog.com/professional-services/

What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT
POST if you DON'T LIKE THAT.




___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Re: [rsyslog] Am I missing something?

2017-02-14 Thread Rainer Gerhards 
I don't understand the question.

RG


2017-02-14 16:46 GMT+01:00 mostolog--- via rsyslog <
rsyslog@lists.adiscon.com>:

> Why permitSlashInHostname is not permitSlashInTag instead?
>
> From: http://www.rsyslog.com/doc/master/configuration/properties.html
>
> ___
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

[rsyslog] Am I missing something?

2017-02-14 Thread mostolog--- via rsyslog 

Why permitSlashInHostname is not permitSlashInTag instead?

From: http://www.rsyslog.com/doc/master/configuration/properties.html

___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.