Re: [rsyslog] forwarding mysqld log

2013-04-05 Thread David Lang
On Fri, 5 Apr 2013, Josh Bitto wrote: I'm having a problem with how the output is happening. Its filling up my messages file with repetitive information. you need to explain the problem a bit more 1. what are you seeing 2. what do you expect to see Should my /etc/rsyslog.d/forwardFile.con

Re: [rsyslog] httpd logs can't get error log to work

2013-04-05 Thread David Lang
On Fri, 5 Apr 2013, Josh Bitto wrote: if \ $source != 'syslog.onlineschool.ca' \ and \ $programname == 'httpd' \ and \ $syslogfacility-text == 'local6' \ then?httpdaccess if \ $source != 'syslog.onlineschool.ca' \

Re: [rsyslog] Receiving logs from switches

2013-04-05 Thread David Lang
On Fri, 5 Apr 2013, Josh Bitto wrote: I entered the following into my config: # Logs from switch :fromhost-ip, isequal, "ipaddress" /var/log/hosts/switches & ~ up until recently, I believe you needed to use ' instead of " I can't find it anywherewhen I look at the switch to send logs.

[rsyslog] Receiving logs from switches

2013-04-05 Thread Josh Bitto
I entered the following into my config: # Logs from switch :fromhost-ip, isequal, "ipaddress" /var/log/hosts/switches & ~ I can't find it anywherewhen I look at the switch to send logs...its set to warning and above on local3 facility. What should it be? Joshua Bitto Information Technolo

Re: [rsyslog] httpd logs can't get error log to work

2013-04-05 Thread Josh Bitto
Ok so I figured out why it wasn't working...local7 is already being used in the config for a default rule...so I changed that to local5 It still isn't forwarding _ From: Josh Bitto Sent: Friday, April 05, 2013 1:44 PM To: rsyslog-users (rsyslog@

[rsyslog] httpd logs can't get error log to work

2013-04-05 Thread Josh Bitto
So I used the instructions per here... http://wiki.rsyslog.com/index.php/Working_Apache_and_Rsyslog_configuration I have a nifty access and error logs in /var/log/httpd-access.log /var/log/httpd-error.log Ok so that all good and dandy.In the instructions I kept the same local 6 and 7 in the

Re: [rsyslog] Need help to understand RainerScript behavior (rsyslog 7.2.6)

2013-04-05 Thread Philippe Muller
I finally got time to test your patch. And it works perfectly! Combined with the previous one, the test case of my first post works as expected. :-) If some wants to play with it on rsyslog 7.2.6: http://pastebin.com/Y8T7cYS5 Thanks Rainer ! Philippe Muller On Fri, Apr 5, 2013 at 6:44 PM, Rai

[rsyslog] forwarding mysqld log

2013-04-05 Thread Josh Bitto
I'm having a problem with how the output is happening. Its filling up my messages file with repetitive information. Should my /etc/rsyslog.d/forwardFile.conf look like this? $ModLoad imfile # File 1 $InputFileName /var/log/mysqld.log $InputFileTag mysqld: $InputFileStateFile stat-file1 $InputFil

Re: [rsyslog] Need help to understand RainerScript behavior (rsyslog 7.2.6)

2013-04-05 Thread Rainer Gerhards
On Fri, 2013-04-05 at 18:20 +0200, Philippe Muller wrote: > How should I apply it ? > > I tested on 7.2.6, 7.3.9 and git master. It always gets rejected. > It probably needs the other patch in v7-stable. So building from git v7-stable would be one option. I can also see that I merge the patch up

Re: [rsyslog] Templates

2013-04-05 Thread Josh Bitto
Ok cool thanks! -Original Message- From: rsyslog-boun...@lists.adiscon.com [mailto:rsyslog-boun...@lists.adiscon.com] On Behalf Of Todd Mortensen Sent: Friday, April 05, 2013 9:27 AM To: rsyslog-users Subject: Re: [rsyslog] Templates You can make the template name anything you want. It

Re: [rsyslog] Templates

2013-04-05 Thread Todd Mortensen
You can make the template name anything you want. It doesn't even need to begin with DYN. On Fri, Apr 5, 2013 at 9:21 AM, Josh Bitto wrote: > When creating a template is there a certain way to name them or could I > make anything and use that in my if then statements. > > Example... > > $temp

[rsyslog] Templates

2013-04-05 Thread Josh Bitto
When creating a template is there a certain way to name them or could I make anything and use that in my if then statements. Example... $template DYNmessages,"/var/log/hosts/%HOSTNAME%/messages" if \ $source != 'syslog.onlineschool.ca' \ and \ $syslogseverity <= '6'

Re: [rsyslog] Need help to understand RainerScript behavior (rsyslog 7.2.6)

2013-04-05 Thread Philippe Muller
How should I apply it ? I tested on 7.2.6, 7.3.9 and git master. It always gets rejected. Philippe Muller On Thu, Apr 4, 2013 at 4:10 PM, Rainer Gerhards wrote: > Philippe, > > > FYI: can reproduce, and seems to be present in master branch as well. > > OK, this was a very weird issue, related

Re: [rsyslog] filtering mysql log

2013-04-05 Thread Rainer Gerhards
On Fri, 2013-04-05 at 14:31 +0200, Ana Gallardo Gómez wrote: > > if $rawmsg contains 'mysql' then -/var/log/mysql/mysql.log > > > Thats work for me. Thanks a lot. excellent :-D Rainer ___ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/

Re: [rsyslog] filtering mysql log

2013-04-05 Thread Ana Gallardo Gómez
> if $rawmsg contains 'mysql' then -/var/log/mysql/mysql.log Thats work for me. Thanks a lot. ___ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https:/

Re: [rsyslog] filtering mysql log

2013-04-05 Thread Rainer Gerhards
From what I have seen, it looks like a bug in that version (but I did not try overly hard). Might just be a parsing issue, in which case the following could work: if $rawmsg contains 'mysql' then -/var/log/mysql/mysql.log #y luego lo tiras & ~ HTH Rainer On Fri, 2013-04-05 at 12:58 +0200, Ana Ga

Re: [rsyslog] filtering mysql log

2013-04-05 Thread Rainer Gerhards
On Fri, 2013-04-05 at 12:58 +0200, Ana Gallardo Gómez wrote: > Hello again, > > my master file /etc/rsyslog.conf: > > > My configuration is: > > > > > > # cat /etc/rsyslog.conf > > > > > > $ModLoad imuxsock # provides support for local system logging > > > $ModLoad imklog # provides kernel log

Re: [rsyslog] filtering mysql log

2013-04-05 Thread Ana Gallardo Gómez
Hello again, my master file /etc/rsyslog.conf: > My configuration is: > > > > # cat /etc/rsyslog.conf > > > > $ModLoad imuxsock # provides support for local system logging > > $ModLoad imklog # provides kernel logging support (previously done by > > rklogd) > > > > $ActionFileDefaultTemplate R

Re: [rsyslog] filtering mysql log

2013-04-05 Thread Rainer Gerhards
On Fri, 2013-04-05 at 12:30 +0200, Ana Gallardo Gómez wrote: > Hello, > > thank you for your response. > > > > That's a very old version, but probably good enough for what you want to > > do. > > > > ok > > This looks correct, but most probably is at the wrong place in > > rsyslog.conf. It nee

Re: [rsyslog] filtering mysql log

2013-04-05 Thread Ana Gallardo Gómez
Hello, thank you for your response. > That's a very old version, but probably good enough for what you want to > do. > ok This looks correct, but most probably is at the wrong place in > rsyslog.conf. It needs to be above the rule for /var/log/syslog. > > If you post your complete config, we c

Re: [rsyslog] filtering mysql log

2013-04-05 Thread Rainer Gerhards
On Fri, 2013-04-05 at 12:17 +0200, Ana Gallardo Gómez wrote: > Hello, > > this is my first messge to the list. I'm using debian: > > # uname -a > Linux lw06 2.6.32-5-amd64 #1 SMP Sun Sep 23 10:07:46 UTC 2012 x86_64 > GNU/Linux > > # mysql --version > mysql Ver 14.14 Distrib 5.1.63, for debian-l

[rsyslog] filtering mysql log

2013-04-05 Thread Ana Gallardo Gómez
Hello, this is my first messge to the list. I'm using debian: # uname -a Linux lw06 2.6.32-5-amd64 #1 SMP Sun Sep 23 10:07:46 UTC 2012 x86_64 GNU/Linux # mysql --version mysql Ver 14.14 Distrib 5.1.63, for debian-linux-gnu (x86_64) using readline 6.1 # rsyslogd -v rsyslogd 4.6.4, compiled with