[rsyslog] trusted properties parsing documentation/code error

2013-07-22 Thread David Lang
The documentation at http://www.rsyslog.com/doc/imuxsock.html says that the old-style config to enable parsing the trusted properties into $! variables is $SystemLogSocketParseTrusted but what the code looks for is $SystemLogParseTrusted please update the two to match (whichever direction)

Re: [rsyslog] mmjsonparse missing from Ubuntu 13.04 packages?

2013-07-22 Thread David Lang
Ok, I finally caught on that this repository splits rsyslog into a bunch of different packages. It would probably be a good idea to update the pages at http://www.rsyslog.com/ubuntu-repository/ and http://www.rsyslog.com/how-to-use-the-ubuntu-repository/ to mention the different packages avai

Re: [rsyslog] [PATCH] mmcount: message modification plugin which counts messages

2013-07-22 Thread Balamurugan Arumugam
- Original Message - > From: "Rainer Gerhards" > To: "rsyslog-users" > Sent: Monday, July 22, 2013 1:54:48 PM > Subject: Re: [rsyslog] [PATCH] mmcount: message modification plugin which > counts messages > > IMHO this is a tactical interim solution to be replaced when global vars > ar

[rsyslog] how can i use the log file with a name in date format as input file

2013-07-22 Thread gaosong
hi, i am new to rsyslog, part of my config file is as follow: $ModLoad imfile # File uc213 $InputFileName /logs/uc/usercenter.out.log $InputFileTag uc213: $InputFileStateFile /var/log/stat-uc213 $InputFileFacility local7 #$InputFileReadMode 2 $InputRunFileMonitor $InputFilePollInterval 5 local7.*

Re: [rsyslog] Segfault when using omsnmp

2013-07-22 Thread Bryn Hughes
Thanks David, I've posted the full debug output here: http://pastebin.com/nDzmiUxV There is nothing that immediately jumps out at me - no "missing library version blah" or anything like that... I confirmed that the system has net-snmp-libs installed, plus tried both the version off of the origin

Re: [rsyslog] Segfault when using omsnmp

2013-07-22 Thread David Lang
If you try to start rsyslog with the -dn options, does it tell you anything interesting when it segfaults? My guess is that you are missing the snmp library that it's trying to access, but I think the debug output would make it very clear. David Lang On Mon, 22 Jul 2013, Bryn Hughes wrote:

[rsyslog] Segfault when using omsnmp

2013-07-22 Thread Bryn Hughes
Hi there, We need to be able to send SNMP traps based on certain log messages. rsyslog looks to be able to do exactly what I need, however it is segfaulting on me if I try and start it with an SNMP configuration. Here is my brutally simple SNMP config: # Load the SNMP module $ModLoad omsnmp if

[rsyslog] problems with 7.4.2 stable and omzmq3

2013-07-22 Thread Gary Foster
We recently upgraded to the latest 7.4.2 stable release (and have been tracking the 7x-devel branch fairly closely prior to that). However, with this upgrade I lost the ability to use the omzmq3 plugin. Using zeromq 3.2.3 and libczmq 1.3.2 I get this when I try to load the omzmq3 plugin: "und

Re: [rsyslog] Multiple Email messages filter

2013-07-22 Thread jc_ruiz
Now that I understand the variables get cleared after the if statement I'm configuring two files under the /etc/rsyslog.d/ folder with a numeric value at the end of a file. The first file has the email template config with the pattern I'm looking for to send an email and the second file with a hi

[rsyslog] univocal certificates

2013-07-22 Thread Pol Hallen
Hi all :-) Follow this guide: http://www.rsyslog.com/doc/rsyslog_tls.html (thanks to author) I correctly configurated a centralized log server. I need create univocal certificates for each clients. So, if I put a certificate (i.e. certificate01) to client, that certificate runs only to one comput

Re: [rsyslog] RELP stops working after startup

2013-07-22 Thread Gene
(Sorry for any broken threading, didn't get the original reply due to mistakenly setting digest) Unfortunately the issue persists with the same symptoms, even though the message spam is gone. Now the last lines are (after about 160 iterations of the same): 5005.406661757:7f46b3eea700: relp engine

[rsyslog] mmjsonparse missing from Ubuntu 13.04 packages?

2013-07-22 Thread David Lang
I installed the ubuntu 13.04 packages, but when I try to load mjsonparse I get an error message that the .so file is not found. Is that package compiled with support for mmjsonparse and the other mm modules? David Lang ___ rsyslog mailing list http://

Re: [rsyslog] Multiple Email messages filter

2013-07-22 Thread David Lang
well one thing that I see is a problem is the & on a line by itself that's like saying if $msg contains 'Login' then with no action following 'then' That could be causing rsyslog to stop parsing the config file, what errors show up during startup? you may need to start rsyslogd with the -dn f

Re: [rsyslog] Multiple Email messages filter

2013-07-22 Thread jc_ruiz
Here is the full confi The first if works but then the next if do not. If the variables clear I'm sure this is what is happening then. $ModLoad ommail $ActionMailSMTPServer 192.168.1.25 $ActionMailFrom CH-RSYSLOG01 $ActionMailTo adminsyslog $template mailSubject,"A syslog alert at %timegenerate

Re: [rsyslog] [PATCH] mmcount: message modification plugin which counts messages

2013-07-22 Thread Rainer Gerhards
IMHO this is a tactical interim solution to be replaced when global vars are available (Which are hopefully soon). Rainer On Mon, Jul 22, 2013 at 7:55 AM, David Lang wrote: > Question, how would you track more than one count? > > If the variable set was $! or $!, this would be obvious, > but i

Re: [rsyslog] rsyslog 7.4.3 (v7-stable) released

2013-07-22 Thread Tim Eifler
Hi all, Sorry for the hassle, this was my mistake! The problem was that I didn't received a second email so I have released the information of the wrong build. So I also can confirm it! Below you can find the correct information of the release: size: 2908523 sha256sum: d96fcb733452177f5f06789507e