Re: [rsyslog] Seeking Help with variables

2018-02-27 Thread putcha narayana via rsyslog
Deoren <= ($syslogseverity <= $.configuredseverity) check is also working. There was another conf file which was filtering out *.warn to another log file. The numbering of conf file matters, figured from documentation. i renamed my conf file to a number less than the other conf file. Now things

Re: [rsyslog] Seeking Help with variables

2018-02-27 Thread putcha narayana via rsyslog
Thanks a Ton! Deoren. You made my day! PDF looks very elaborate and informative. I will read it right away. The following worked perfectly fine. The double-quotes around 6 is critical. It is too sensitive. set $.configuredseverity = "6"; if ($syslogseverity <= $.configuredseverity) then { d

Re: [rsyslog] Forward Raw TCP?

2018-02-27 Thread Naftuli Kay via rsyslog
Disregard: failed to check the SELinux logs so that's entirely on me. - Naftuli Kay On Tue, Feb 27, 2018 at 2:11 PM, deoren < rsyslog-users-lists.adiscon@whyaskwhy.org> wrote: > On 2/27/2018 2:40 PM, Naftuli Kay via rsyslog wrote: > >> I am emitting JSON lines using a custom template and at

Re: [rsyslog] Forward Raw TCP?

2018-02-27 Thread deoren
On 2/27/2018 2:40 PM, Naftuli Kay via rsyslog wrote: I am emitting JSON lines using a custom template and attempting to forward them to TCP logs-logstash port 515: https://gist.github.com/naftulikay/47e5f7708cd422f29d97747de0e82869 If I simply "cat blob.json | nc logs-logstash 515", I can get lo

[rsyslog] Forward Raw TCP?

2018-02-27 Thread Naftuli Kay via rsyslog
I am emitting JSON lines using a custom template and attempting to forward them to TCP logs-logstash port 515: https://gist.github.com/naftulikay/47e5f7708cd422f29d97747de0e82869 If I simply "cat blob.json | nc logs-logstash 515", I can get logs into Logstash which is listening on 515. However, rs

[rsyslog] rsyslogd killed by SIGSEGV - RHEL 7 rsyslog v8.24 - disk assisted queues

2018-02-27 Thread Peter Portante via rsyslog
Hi Folks, I am seeing the following stack trace with a SEGV (filed as BZ https://bugzilla.redhat.com/show_bug.cgi?id=1549706): (gdb) where #0 rsCStrDestruct (ppThis=ppThis@entry=0x7ffed00168f0) at stringbuf.c:216 #1 0x5558a468 in varDestruct (ppThis=0x7ffed86d1bc0) at var.c:72 #2 0x000

Re: [rsyslog] Embedding JSON Dictionaries in Templates

2018-02-27 Thread deoren
On 2/27/2018 11:59 AM, Naftuli Kay via rsyslog wrote: These don't seem to address what I am trying to do, but thanks for looking in the right direction :) Welcome. My regular expressions work. I just need to find a way to decode a map into a valid JSON map. Gotcha. I'm afraid that is proba

Re: [rsyslog] Embedding JSON Dictionaries in Templates

2018-02-27 Thread Naftuli Kay via rsyslog
These don't seem to address what I am trying to do, but thanks for looking in the right direction :) My regular expressions work. I just need to find a way to decode a map into a valid JSON map. - Naftuli Kay On Mon, Feb 26, 2018 at 9:22 PM, deoren < rsyslog-users-lists.adiscon@whyaskwhy.or

Re: [rsyslog] Seeking Help with variables

2018-02-27 Thread deoren
On 2/27/2018 5:39 AM, putcha narayana via rsyslog wrote: Hi I am set the variables and using them in filters. But the following are not working as expected or not working at all. Appreciate if you can share a working example or suggest what i am doing wrong. Not Working: set $!configuredseveri

[rsyslog] Seeking Help with variables

2018-02-27 Thread putcha narayana via rsyslog
Hi I am set the variables and using them in filters. But the following are not working as expected or not working at all. Appreciate if you can share a working example or suggest what i am doing wrong. Not Working: set $!configuredseverity = "3"; if ($syslogseverity <= $configuredseverity) Defa