[rsyslog] Property-Based Filters

Radu Gheorghiu radu at pengooin.net
Sat Mar 22 18:32:42 CET 2008


Ok thanks :) I only wanted to know if you received it . But if you also 
fixed it, it's even better :)

Rainer Gerhards wrote:
> Replying as I can ;) I've not been able to go in-depth through the file,
> but I ... doh ;) I guess it's all sitting in there. Lol - sorry.
>
> As an apology, here is the FROMHOST bugfix ;)
>
> http://rsyslog.cvs.sourceforge.net/rsyslog/rsyslog/syslogd.c?r1=1.380.2.
> 21&r2=1.380.2.22&pathrev=Branch_Stable_2-0
>
> Rainer
>
>   
>> -----Original Message-----
>> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
>> bounces at lists.adiscon.com] On Behalf Of Radu Gheorghiu
>> Sent: Saturday, March 22, 2008 6:14 PM
>> To: rsyslog-users
>> Subject: Re: [rsyslog] Property-Based Filters
>>
>> Hmm i think i don't understand . Haven't you received the file that i
>> sent you? Or did i miss something?
>>
>> Radu
>>
>> Rainer Gerhards wrote:
>>     
>>> Well... Rsyslog tries all kind of things to get hold of the real
>>>       
>> host.
>>     
>>> So if you could send me a copy of the one causing problems, I may
>>>       
>> (may
>>     
>>> ;)) be able to do something against it. HOSTNAME should always
>>>       
>> contain
>>     
>>> something usable, but as you say ... it depends ;)
>>>
>>> Rainer
>>>
>>>
>>>       
>>>> -----Original Message-----
>>>> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
>>>> bounces at lists.adiscon.com] On Behalf Of Radu Gheorghiu
>>>> Sent: Saturday, March 22, 2008 2:48 PM
>>>> To: rsyslog-users
>>>> Subject: Re: [rsyslog] Property-Based Filters
>>>>
>>>> I don't think that the HOSTNAME problem is a rsyslog problem.
>>>> I think that the remote host is not sending the HOSTNAME.
>>>> Remote host is using the classic syslog .
>>>> and it is configured like this:
>>>> *.*
>>>>
>>>>         
>>> @central-logger
>>>
>>>       
>>>> on the central logger .. i modify my template for debug:
>>>> $template MyTemplateName,"TheHost:d%HOSTNAME%d %syslogseverity%
>>>>
>>>>         
>>> TheMsg:
>>>
>>>       
>>>> %msg%\n"
>>>>
>>>> and in the  logs:
>>>> TheHost:dlastd 5 TheMsg:  repeated 8 times
>>>>
>>>> Seems like the message had no hostname field.  and rsyslog thinks
>>>> "last"
>>>> is the hostname.
>>>>
>>>> Radu
>>>>
>>>> _______________________________________________
>>>> rsyslog mailing list
>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>>
>>>>         
>>> _______________________________________________
>>> rsyslog mailing list
>>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>
>>>
>>>       
>> _______________________________________________
>> rsyslog mailing list
>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>     
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
>
>   




More information about the rsyslog mailing list