Re: [rsyslog] 100% cpu lockup rsyslog 8.29 on FreeBSD 11.0Rp12 amd64 - bad config?

2017-10-01 Thread Dave Cottlehuber
On Mon, 25 Sep 2017, at 08:18, Andreas Wehrmann via rsyslog wrote: > Hey Dave, > > can you check whether _this_ might be the issue: > http://lists.adiscon.net/pipermail/rsyslog/2017-August/044683.html > > I ran into the same problem (rsyslog locking up the CPU). > > Regards. > Andreas > > _

Re: [rsyslog] Add the file name to syslog data

2017-10-01 Thread David Lang
any time you have a question like this, first log locally with the format RSYSLOG_DebugFormat so that you can see exactly what data you have where. In this case, you will need to enable metadata in your imfile config, this will add the filename (and other information), but it doesn't do this by

Re: [rsyslog] log rotate storage solution?

2017-10-01 Thread David Lang
rsyslog does not manage storage, there are a lot of tools out there that specialize in doing that and have extremely flexible policies to do so. Rsyslog doesn't try to duplicate that effort. David Lang ___ rsyslog mailing list http://lists.adiscon.net

Re: [rsyslog] Is there a difference in scope for local variables vs message json properties?

2017-10-01 Thread David Lang
there is almost no technical difference between $. variables and $! variables. $! existed first, and some functions (mmjsonparse) only put things in $! $. was created because there is a need to have variables that aren't part of $! so that $! can be output in it's entirety. The global variabl