[rsyslog] Property-Based Filters

Rainer Gerhards rgerhards at hq.adiscon.com
Sat Mar 22 18:17:27 CET 2008


Replying as I can ;) I've not been able to go in-depth through the file,
but I ... doh ;) I guess it's all sitting in there. Lol - sorry.

As an apology, here is the FROMHOST bugfix ;)

http://rsyslog.cvs.sourceforge.net/rsyslog/rsyslog/syslogd.c?r1=1.380.2.
21&r2=1.380.2.22&pathrev=Branch_Stable_2-0

Rainer

> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of Radu Gheorghiu
> Sent: Saturday, March 22, 2008 6:14 PM
> To: rsyslog-users
> Subject: Re: [rsyslog] Property-Based Filters
> 
> Hmm i think i don't understand . Haven't you received the file that i
> sent you? Or did i miss something?
> 
> Radu
> 
> Rainer Gerhards wrote:
> > Well... Rsyslog tries all kind of things to get hold of the real
> host.
> > So if you could send me a copy of the one causing problems, I may
> (may
> > ;)) be able to do something against it. HOSTNAME should always
> contain
> > something usable, but as you say ... it depends ;)
> >
> > Rainer
> >
> >
> >> -----Original Message-----
> >> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> >> bounces at lists.adiscon.com] On Behalf Of Radu Gheorghiu
> >> Sent: Saturday, March 22, 2008 2:48 PM
> >> To: rsyslog-users
> >> Subject: Re: [rsyslog] Property-Based Filters
> >>
> >> I don't think that the HOSTNAME problem is a rsyslog problem.
> >> I think that the remote host is not sending the HOSTNAME.
> >> Remote host is using the classic syslog .
> >> and it is configured like this:
> >> *.*
> >>
> > @central-logger
> >
> >> on the central logger .. i modify my template for debug:
> >> $template MyTemplateName,"TheHost:d%HOSTNAME%d %syslogseverity%
> >>
> > TheMsg:
> >
> >> %msg%\n"
> >>
> >> and in the  logs:
> >> TheHost:dlastd 5 TheMsg:  repeated 8 times
> >>
> >> Seems like the message had no hostname field.  and rsyslog thinks
> >> "last"
> >> is the hostname.
> >>
> >> Radu
> >>
> >> _______________________________________________
> >> rsyslog mailing list
> >> http://lists.adiscon.net/mailman/listinfo/rsyslog
> >>
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> >
> >
> 
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog



More information about the rsyslog mailing list