[rsyslog] Question regarding imfile Input Parameters

Hi, For imfile input parameters the parameter Tag, is it applied while reading the file or on the content that is read from the file? Tag: The tag to be used for messages that originate from this file. Does the above imply while reading from file, Tag is used as some kind of filter or it is use

Re: [rsyslog] Anyone have any good guides for the specific regex format/syntax required for re_extract() ?

I’ll second David and say that mmnormalize is your better option. Though whenever I get in a discussion about troubleshooting regex I always make a point to recommend the Regex Rx app (if you’re a Mac user): https://itunes.apple.com/us/app/regexrx/id498370702?mt=12

Re: [rsyslog] Anyone have any good guides for the specific regex format/syntax required for re_extract() ?

On Tue, 20 Feb 2018, deoren wrote: On 2/20/2018 6:39 PM, deoren wrote: I've been attempting to use the re_extract() function quite a bit lately to write some simple "filters" for notification purposes. I struggled with the syntax for a while until I realized tha the  and have been struggling

Re: [rsyslog] Anyone have any good guides for the specific regex format/syntax required for re_extract() ?

you really should look at using mmnormalize to extract fields from the logs, it's FAR faster. Rainer may be able to answer off the top of his head, otherwise we would have to dig into the code. David Lang On Tue, 20 Feb 2018, deoren wrote: I've been attempting to use the re_extract() functi

Re: [rsyslog] Anyone have any good guides for the specific regex format/syntax required for re_extract() ?

On 2/20/2018 6:39 PM, deoren wrote: I've been attempting to use the re_extract() function quite a bit lately to write some simple "filters" for notification purposes. I struggled with the syntax for a while until I realized tha the  and have been struggling quite a bit with the regex support fo

[rsyslog] Anyone have any good guides for the specific regex format/syntax required for re_extract() ?

I've been attempting to use the re_extract() function quite a bit lately to write some simple "filters" for notification purposes. I struggled with the syntax for a while until I realized tha the and have been struggling quite a bit with the regex support for the re_extract() function. Accordi

Re: [rsyslog] rsyslog 8.33.0 (v8-stable) released

It might be worth adding this specific patch to the version we build. Rainer Sent from phone, thus brief. Am 20.02.2018 18:11 schrieb "Florian Riedl" : > No, you can only use the fix if you build librdkafka yourself on your > system from the most recent sourcecode available. The packages we > p

Re: [rsyslog] rsyslog 8.33.0 (v8-stable) released

Cool, thanks! Will wait for updating then. On Feb 20, 2018 9:19 AM, "Florian Riedl" wrote: > With the next librdkafka release, yes. Probably, we'll update the > packages before next rsyslog release, too. > > 2018-02-20 18:12 GMT+01:00 Luigi Tagliamonte < > luigi.tagliamont...@gmail.com>: > > @fl

Re: [rsyslog] rsyslog 8.33.0 (v8-stable) released

With the next librdkafka release, yes. Probably, we'll update the packages before next rsyslog release, too. 2018-02-20 18:12 GMT+01:00 Luigi Tagliamonte : > @florian is there any plan to update your package, next release maybe? > > On Tue, Feb 20, 2018 at 9:11 AM, Florian Riedl wrote: >> >> No,

Re: [rsyslog] rsyslog 8.33.0 (v8-stable) released

@florian is there any plan to update your package, next release maybe? On Tue, Feb 20, 2018 at 9:11 AM, Florian Riedl wrote: > No, you can only use the fix if you build librdkafka yourself on your > system from the most recent sourcecode available. The packages we > provide are built with the v0

Re: [rsyslog] rsyslog 8.33.0 (v8-stable) released

No, you can only use the fix if you build librdkafka yourself on your system from the most recent sourcecode available. The packages we provide are built with the v0.11.3 release from Dec 4. 2018-02-20 17:10 GMT+01:00 Luigi Tagliamonte via rsyslog : > @florian does this release contain also a new

Re: [rsyslog] rsyslog 8.33.0 (v8-stable) released

@florian does this release contain also a new build of im/omkafka modules including this fix: link ? On Tue, Feb 20, 2018 at 6:59 AM, Florian Riedl wrote: > Hi all, > > Today, we release rsyslog 8.33.0. This release has a

[rsyslog] rsyslog 8.33.0 (v8-stable) released

Hi all, Today, we release rsyslog 8.33.0. This release has a number of changes, but most of these are under the hood. Some of the more obivous changes are the new include() script object and template json container. Also, rsyslog now has better support for running in a container environment. The f

[rsyslog] log some and discard others

Hi, I'm pretty sure I am doing this wrong: *.info;mail.none;cron.none @@syslog-new Shouldn't this send all *.info to the remote server except anything above mail.none and cron.none? For some reason this line still sends cron.none & mail.none and above to the remote server. B