[rsyslog] 4.2.1 parse request

Rainer Gerhards rgerhards at hq.adiscon.com
Mon Aug 17 14:47:29 CEST 2009


Hi David,

I was able to extend the parser to support it. However, I can not do that in
4.2.1, as this is a stable release and, by definition, stable releases do
only receive bug fixes (and this is a feature enhancement). So it is part of
the next version of v4-devel.

However, the patch should be easy to apply to previous versions if you like
to. Find it here:

http://git.adiscon.com/?p=rsyslog.git;a=commitdiff;h=aa10f7a16415112c014c6c62
8f2f25f4eb4beaa2

Rainer

> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of david at lang.hm
> Sent: Monday, August 10, 2009 11:23 PM
> To: rsyslog-users
> Subject: [rsyslog] 4.2.1 parse request
> 
> I have a device creating logs like this (%raymsg%)
> 
> <6>AUG 10 22:18:24 2009  netips-warden2-p [audit] user=[*SMS]
> src=192.168.11.11 iface=5 access=9 Update State Reset
> 
> rsyslog 4.2.1 makes the hostname 'AUG' and the syslogtag '10'
> 
> how bad would it be to check to see if it's a case problem like this
> when
> no timestamp is detected?
> 
> David Lang
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com



More information about the rsyslog mailing list