[rsyslog] properties not getting filled in correctly

[david at lang.hm]

On Fri, 6 Mar 2009, david at lang.hm wrote:

> I'm running into problems trying to do filtering. it looks as if the log 
> parsing is not properly filling in the properties.
>
> what I've run into so far
>
> when I use the property 'programname' the content that I see is what I would 
> expect in 'hostname'
>
> when I use the property 'hostname' the content that I see is what I would 
> expect in 'fromhost'
>
> I haven't checked all the other properties, but my guess is that somehow 
> rsyslog is off-by-one in filling them in.

having said this, date, fromhost, and from-ip appear to be filled in 
correctly.

David Lang